@paigy/harness 0.3.5 → 0.3.7

package/dist/cli.js

@@ -746,12 +746,12 @@ function isValidCidr(ip, version) {
   }
   return false;
 }
-function floatSafeRemainder(val, step) {
+function floatSafeRemainder(val, step2) {
   const valDecCount = (val.toString().split(".")[1] || "").length;
-  const stepDecCount = (step.toString().split(".")[1] || "").length;
+  const stepDecCount = (step2.toString().split(".")[1] || "").length;
   const decCount = valDecCount > stepDecCount ? valDecCount : stepDecCount;
   const valInt = Number.parseInt(val.toFixed(decCount).replace(".", ""));
-  const stepInt = Number.parseInt(step.toFixed(decCount).replace(".", ""));
+  const stepInt = Number.parseInt(step2.toFixed(decCount).replace(".", ""));
   return valInt % stepInt / 10 ** decCount;
 }
 function deepPartialify(schema) {
@@ -6492,7 +6492,7 @@ var require_connect = __commonJS({
       const sessionCache = new SessionCache(maxCachedSessions == null ? 100 : maxCachedSessions);
       timeout = timeout == null ? 1e4 : timeout;
       allowH2 = allowH2 != null ? allowH2 : false;
-      return function connect({ hostname: hostname2, host, protocol, port, servername, localAddress, httpSocket }, callback) {
+      return function connect2({ hostname: hostname2, host, protocol, port, servername, localAddress, httpSocket }, callback) {
         let socket;
         if (protocol === "https:") {
           if (!tls) {
@@ -11578,7 +11578,7 @@ var require_client = __commonJS({
         strictContentLength,
         maxCachedSessions,
         maxRedirections,
-        connect: connect2,
+        connect: connect3,
         maxRequestsPerClient,
         localAddress,
         maxResponseSize,
@@ -11629,7 +11629,7 @@ var require_client = __commonJS({
         if (bodyTimeout != null && (!Number.isInteger(bodyTimeout) || bodyTimeout < 0)) {
           throw new InvalidArgumentError("bodyTimeout must be a positive integer or zero");
         }
-        if (connect2 != null && typeof connect2 !== "function" && typeof connect2 !== "object") {
+        if (connect3 != null && typeof connect3 !== "function" && typeof connect3 !== "object") {
           throw new InvalidArgumentError("connect must be a function or an object");
         }
         if (maxRedirections != null && (!Number.isInteger(maxRedirections) || maxRedirections < 0)) {
@@ -11653,15 +11653,15 @@ var require_client = __commonJS({
         if (maxConcurrentStreams != null && (typeof maxConcurrentStreams !== "number" || maxConcurrentStreams < 1)) {
           throw new InvalidArgumentError("maxConcurrentStreams must be a positive integer, greater than 0");
         }
-        if (typeof connect2 !== "function") {
-          connect2 = buildConnector({
+        if (typeof connect3 !== "function") {
+          connect3 = buildConnector({
             ...tls,
             maxCachedSessions,
             allowH2,
             socketPath,
             timeout: connectTimeout,
             ...autoSelectFamily ? { autoSelectFamily, autoSelectFamilyAttemptTimeout } : void 0,
-            ...connect2
+            ...connect3
           });
         }
         if (interceptors?.Client && Array.isArray(interceptors.Client)) {
@@ -11676,7 +11676,7 @@ var require_client = __commonJS({
           this[kInterceptors] = [createRedirectInterceptor({ maxRedirections })];
         }
         this[kUrl] = util2.parseOrigin(url);
-        this[kConnector] = connect2;
+        this[kConnector] = connect3;
         this[kPipelining] = pipelining != null ? pipelining : 1;
         this[kMaxHeadersSize] = maxHeaderSize || http.maxHeaderSize;
         this[kKeepAliveDefaultTimeout] = keepAliveTimeout == null ? 4e3 : keepAliveTimeout;
@@ -11730,7 +11730,7 @@ var require_client = __commonJS({
       }
       /* istanbul ignore: only used for test */
       [kConnect](cb) {
-        connect(this);
+        connect2(this);
         this.once("connect", cb);
       }
       [kDispatch](opts, handler) {
@@ -11794,7 +11794,7 @@ var require_client = __commonJS({
         assert(client[kSize] === 0);
       }
     }
-    async function connect(client) {
+    async function connect2(client) {
       assert(!client[kConnecting]);
       assert(!client[kHTTPContext]);
       let { host, hostname: hostname2, protocol, port } = client[kUrl];
@@ -11965,7 +11965,7 @@ var require_client = __commonJS({
           return;
         }
         if (!client[kHTTPContext]) {
-          connect(client);
+          connect2(client);
           return;
         }
         if (client[kHTTPContext].destroyed) {
@@ -12258,7 +12258,7 @@ var require_pool = __commonJS({
       constructor(origin, {
         connections,
         factory = defaultFactory,
-        connect,
+        connect: connect2,
         connectTimeout,
         tls,
         maxCachedSessions,
@@ -12274,25 +12274,25 @@ var require_pool = __commonJS({
         if (typeof factory !== "function") {
           throw new InvalidArgumentError("factory must be a function.");
         }
-        if (connect != null && typeof connect !== "function" && typeof connect !== "object") {
+        if (connect2 != null && typeof connect2 !== "function" && typeof connect2 !== "object") {
           throw new InvalidArgumentError("connect must be a function or an object");
         }
-        if (typeof connect !== "function") {
-          connect = buildConnector({
+        if (typeof connect2 !== "function") {
+          connect2 = buildConnector({
             ...tls,
             maxCachedSessions,
             allowH2,
             socketPath,
             timeout: connectTimeout,
             ...autoSelectFamily ? { autoSelectFamily, autoSelectFamilyAttemptTimeout } : void 0,
-            ...connect
+            ...connect2
           });
         }
         super(options);
         this[kInterceptors] = options.interceptors?.Pool && Array.isArray(options.interceptors.Pool) ? options.interceptors.Pool : [];
         this[kConnections] = connections || null;
         this[kUrl] = util2.parseOrigin(origin);
-        this[kOptions] = { ...util2.deepClone(options), connect, allowH2 };
+        this[kOptions] = { ...util2.deepClone(options), connect: connect2, allowH2 };
         this[kOptions].interceptors = options.interceptors ? { ...options.interceptors } : void 0;
         this[kFactory] = factory;
         this.on("connectionError", (origin2, targets, error) => {
@@ -12487,22 +12487,22 @@ var require_agent = __commonJS({
       return opts && opts.connections === 1 ? new Client(origin, opts) : new Pool(origin, opts);
     }
     var Agent = class extends DispatcherBase {
-      constructor({ factory = defaultFactory, maxRedirections = 0, connect, ...options } = {}) {
+      constructor({ factory = defaultFactory, maxRedirections = 0, connect: connect2, ...options } = {}) {
         if (typeof factory !== "function") {
           throw new InvalidArgumentError("factory must be a function.");
         }
-        if (connect != null && typeof connect !== "function" && typeof connect !== "object") {
+        if (connect2 != null && typeof connect2 !== "function" && typeof connect2 !== "object") {
           throw new InvalidArgumentError("connect must be a function or an object");
         }
         if (!Number.isInteger(maxRedirections) || maxRedirections < 0) {
           throw new InvalidArgumentError("maxRedirections must be a positive number");
         }
         super(options);
-        if (connect && typeof connect !== "function") {
-          connect = { ...connect };
+        if (connect2 && typeof connect2 !== "function") {
+          connect2 = { ...connect2 };
         }
         this[kInterceptors] = options.interceptors?.Agent && Array.isArray(options.interceptors.Agent) ? options.interceptors.Agent : [createRedirectInterceptor({ maxRedirections })];
-        this[kOptions] = { ...util2.deepClone(options), connect };
+        this[kOptions] = { ...util2.deepClone(options), connect: connect2 };
         this[kOptions].interceptors = options.interceptors ? { ...options.interceptors } : void 0;
         this[kMaxRedirections] = maxRedirections;
         this[kFactory] = factory;
@@ -12597,16 +12597,16 @@ var require_proxy_agent = __commonJS({
     }
     var Http1ProxyWrapper = class extends DispatcherBase {
       #client;
-      constructor(proxyUrl, { headers = {}, connect, factory }) {
+      constructor(proxyUrl, { headers = {}, connect: connect2, factory }) {
         super();
         if (!proxyUrl) {
           throw new InvalidArgumentError("Proxy URL is mandatory");
         }
         this[kProxyHeaders] = headers;
         if (factory) {
-          this.#client = factory(proxyUrl, { connect });
+          this.#client = factory(proxyUrl, { connect: connect2 });
         } else {
-          this.#client = new Client(proxyUrl, { connect });
+          this.#client = new Client(proxyUrl, { connect: connect2 });
         }
       }
       [kDispatch](opts, handler) {
@@ -12668,7 +12668,7 @@ var require_proxy_agent = __commonJS({
         } else if (username && password) {
           this[kProxyHeaders]["proxy-authorization"] = `Basic ${Buffer.from(`${decodeURIComponent(username)}:${decodeURIComponent(password)}`).toString("base64")}`;
         }
-        const connect = buildConnector({ ...opts.proxyTls });
+        const connect2 = buildConnector({ ...opts.proxyTls });
         this[kConnectEndpoint] = buildConnector({ ...opts.requestTls });
         const agentFactory = opts.factory || defaultAgentFactory;
         const factory = (origin2, options) => {
@@ -12676,13 +12676,13 @@ var require_proxy_agent = __commonJS({
           if (!this[kTunnelProxy] && protocol2 === "http:" && this[kProxy].protocol === "http:") {
             return new Http1ProxyWrapper(this[kProxy].uri, {
               headers: this[kProxyHeaders],
-              connect,
+              connect: connect2,
               factory: agentFactory
             });
           }
           return agentFactory(origin2, options);
         };
-        this[kClient] = clientFactory(url, { connect });
+        this[kClient] = clientFactory(url, { connect: connect2 });
         this[kAgent] = new Agent({
           ...opts,
           factory,
@@ -14379,10 +14379,10 @@ var require_api_connect = __commonJS({
         }
       }
     };
-    function connect(opts, callback) {
+    function connect2(opts, callback) {
       if (callback === void 0) {
         return new Promise((resolve3, reject) => {
-          connect.call(this, opts, (err, data) => {
+          connect2.call(this, opts, (err, data) => {
             return err ? reject(err) : resolve3(data);
           });
         });
@@ -14398,7 +14398,7 @@ var require_api_connect = __commonJS({
         queueMicrotask(() => callback(err, { opaque }));
       }
     }
-    module.exports = connect;
+    module.exports = connect2;
   }
 });
 
@@ -21050,19 +21050,19 @@ var require_connection = __commonJS({
         ws[kReadyState] = states.CLOSING;
       } else if (ws[kSentClose] === sentCloseFrameState.NOT_SENT) {
         ws[kSentClose] = sentCloseFrameState.PROCESSING;
-        const frame2 = new WebsocketFrameSend();
+        const frame3 = new WebsocketFrameSend();
         if (code !== void 0 && reason === void 0) {
-          frame2.frameData = Buffer.allocUnsafe(2);
-          frame2.frameData.writeUInt16BE(code, 0);
+          frame3.frameData = Buffer.allocUnsafe(2);
+          frame3.frameData.writeUInt16BE(code, 0);
         } else if (code !== void 0 && reason !== void 0) {
-          frame2.frameData = Buffer.allocUnsafe(2 + reasonByteLength);
-          frame2.frameData.writeUInt16BE(code, 0);
-          frame2.frameData.write(reason, 2, "utf-8");
+          frame3.frameData = Buffer.allocUnsafe(2 + reasonByteLength);
+          frame3.frameData.writeUInt16BE(code, 0);
+          frame3.frameData.write(reason, 2, "utf-8");
         } else {
-          frame2.frameData = emptyBuffer;
+          frame3.frameData = emptyBuffer;
         }
         const socket = ws[kResponse].socket;
-        socket.write(frame2.createFrame(opcodes.CLOSE));
+        socket.write(frame3.createFrame(opcodes.CLOSE));
         ws[kSentClose] = sentCloseFrameState.SENT;
         ws[kReadyState] = states.CLOSING;
       } else {
@@ -21545,8 +21545,8 @@ var require_receiver = __commonJS({
           return false;
         } else if (opcode === opcodes.PING) {
           if (!this.ws[kReceivedClose]) {
-            const frame2 = new WebsocketFrameSend(body);
-            this.ws[kResponse].socket.write(frame2.createFrame(opcodes.PONG));
+            const frame3 = new WebsocketFrameSend(body);
+            this.ws[kResponse].socket.write(frame3.createFrame(opcodes.PONG));
             if (channels.ping.hasSubscribers) {
               channels.ping.publish({
                 payload: body
@@ -21596,14 +21596,14 @@ var require_sender = __commonJS({
       }
       add(item, cb, hint) {
         if (hint !== sendHints.blob) {
-          const frame2 = createFrame(item, hint);
+          const frame3 = createFrame(item, hint);
           if (!this.#running) {
-            this.#socket.write(frame2, cb);
+            this.#socket.write(frame3, cb);
           } else {
             const node2 = {
               promise: null,
               callback: cb,
-              frame: frame2
+              frame: frame3
             };
             this.#queue.push(node2);
           }
@@ -21685,7 +21685,7 @@ var require_websocket = __commonJS({
     var { types } = __require("util");
     var { ErrorEvent, CloseEvent } = require_events();
     var { SendQueue } = require_sender();
-    var WebSocket = class _WebSocket extends EventTarget {
+    var WebSocket2 = class _WebSocket extends EventTarget {
       #events = {
         open: null,
         error: null,
@@ -21947,11 +21947,11 @@ var require_websocket = __commonJS({
         fireEvent("open", this);
       }
     };
-    WebSocket.CONNECTING = WebSocket.prototype.CONNECTING = states.CONNECTING;
-    WebSocket.OPEN = WebSocket.prototype.OPEN = states.OPEN;
-    WebSocket.CLOSING = WebSocket.prototype.CLOSING = states.CLOSING;
-    WebSocket.CLOSED = WebSocket.prototype.CLOSED = states.CLOSED;
-    Object.defineProperties(WebSocket.prototype, {
+    WebSocket2.CONNECTING = WebSocket2.prototype.CONNECTING = states.CONNECTING;
+    WebSocket2.OPEN = WebSocket2.prototype.OPEN = states.OPEN;
+    WebSocket2.CLOSING = WebSocket2.prototype.CLOSING = states.CLOSING;
+    WebSocket2.CLOSED = WebSocket2.prototype.CLOSED = states.CLOSED;
+    Object.defineProperties(WebSocket2.prototype, {
       CONNECTING: staticPropertyDescriptors,
       OPEN: staticPropertyDescriptors,
       CLOSING: staticPropertyDescriptors,
@@ -21975,7 +21975,7 @@ var require_websocket = __commonJS({
         configurable: true
       }
     });
-    Object.defineProperties(WebSocket, {
+    Object.defineProperties(WebSocket2, {
       CONNECTING: staticPropertyDescriptors,
       OPEN: staticPropertyDescriptors,
       CLOSING: staticPropertyDescriptors,
@@ -22039,7 +22039,7 @@ var require_websocket = __commonJS({
       closeWebSocketConnection(this, code);
     }
     module.exports = {
-      WebSocket
+      WebSocket: WebSocket2
     };
   }
 });
@@ -22743,6 +22743,8 @@ var require_undici = __commonJS({
 // ../../packages/sdk/dist/index.js
 import { createRequire as __sdkCreateRequire } from "module";
 import { createHash, randomUUID } from "crypto";
+import { randomUUID as randomUUID3 } from "crypto";
+import { setTimeout as sleep2 } from "timers/promises";
 import { randomUUID as randomUUID2 } from "crypto";
 import { closeSync, existsSync as existsSync2, mkdirSync, openSync, readFileSync, rmSync, statSync, writeFileSync } from "fs";
 import { homedir as homedir2 } from "os";
@@ -23619,6 +23621,13 @@ function draft2020(node) {
   if (Array.isArray(node)) return node.map(draft2020);
   if (node && typeof node === "object") {
     const o = node;
+    if (Array.isArray(o.items)) {
+      o.prefixItems = o.items;
+      if ("additionalItems" in o) {
+        o.items = o.additionalItems;
+        delete o.additionalItems;
+      } else delete o.items;
+    }
     for (const [excl, lim] of [["exclusiveMinimum", "minimum"], ["exclusiveMaximum", "maximum"]]) {
       if (typeof o[excl] === "boolean") {
         if (o[excl] === true && typeof o[lim] === "number") {
@@ -23637,41 +23646,6 @@ function mcpInputSchema(s) {
   delete schema.$schema;
   return draft2020(schema);
 }
-function contactSchemaFrom(fields) {
-  const surface = external_exports.object({
-    ask: fields.ask.describe(
-      `What to tell the user, or what you need to find out from them. Plain prose \u2014 as long as it needs to be (up to 10k characters); Paigy splits it into topics and reads back a few sentences at a time, so do NOT compress a briefing into one line. May be spoken aloud on a call, so write natural speech and name things (not IDs). Contact at exactly two moments: BLOCKED on a decision only they can make, or DONE (one short report \u2014 what shipped, how you verified it, what you flagged). DONE IS SAID ONCE: "all set", "nothing open on my end", "that thread is complete" are the same report in new words, and each one reaches them separately (live 2026-08-12: three of them in three minutes). After the first, you are finished speaking; if they acknowledge it, stop rather than confirming the acknowledgement. Progress is never a contact: set_work_state carries it, and working narration stays in your own terminal \u2014 the user sees you're working without being interrupted by it.`
-    ),
-    waiting: fields.waiting.describe(
-      "What happens to your work while you wait. 'none': you're just informing them. 'soft': you'd like an answer but can keep working. 'hard': you are STOPPED until they answer \u2014 reaches them urgently and escalates to a real phone call if unanswered."
-    ),
-    options: fields.options.describe(
-      `The choices the user picks from, when you have them \u2014 ${OPTIONS_MIN} to ${OPTIONS_MAX}, drawn from your own sentence.`
-    ),
-    channel: fields.channel.describe(
-      "Relay how the user explicitly said to reach them ('call me' \u2192 'call', 'just message/text me' \u2192 'message'), or use 'call' when promoting the same quiet ask after it becomes a substantial blocker. Omit otherwise; Paigy picks."
-    ),
-    parentId: fields.parentId.describe(
-      "To continue an earlier conversation, pass the parentId a previous contact or reply returned. Omit to start a new one."
-    ),
-    workId: fields.workId.describe(
-      "The durable Work this contact advances. Pass the workId from check_replies or a prior reply when asking for a decision that blocks that work."
-    ),
-    goalId: fields.goalId.describe(
-      "The target Goal this contact advances. Use goalId for the Goal model; do not combine it with workId."
-    ),
-    // THE WAIT, CONTINUED (owner, 2026-09-06: "await should have been folded into contact").
-    // A contact that rang holds its first window itself; the host caps one tool call at
-    // ~60 s, so keeping the line is another contact — with ONLY this field. Nothing is sent.
-    wait: external_exports.string().uuid().optional().describe(
-      "KEEP WAITING on a live call: the notificationId a previous contact returned. Send it ALONE \u2014 no ask, nothing new goes to the user; contact just holds the next ~45 s window and returns the outcome in `wait`."
-    )
-  });
-  const out = mcpInputSchema(surface);
-  delete out.required;
-  out.anyOf = [{ required: ["ask"] }, { required: ["wait"] }];
-  return out;
-}
 function normalizeWaiting(req) {
   if (!req.waiting) return req;
   const { waiting, ...rest } = req;
@@ -23727,220 +23701,6 @@ function deriveAsk(req) {
     ...needs?.length ? { points: needs } : {}
   };
 }
-function utf8ToBytes(s) {
-  const out = [];
-  for (let i = 0; i < s.length; i++) {
-    const c = s.charCodeAt(i);
-    if (c < 128) out.push(c);
-    else if (c < 2048) out.push(192 | c >> 6, 128 | c & 63);
-    else if (c >= 55296 && c <= 56319) {
-      const c2 = s.charCodeAt(i + 1);
-      if (c2 >= 56320 && c2 <= 57343) {
-        i++;
-        const cp = 65536 + ((c & 1023) << 10) + (c2 & 1023);
-        out.push(240 | cp >> 18, 128 | cp >> 12 & 63, 128 | cp >> 6 & 63, 128 | cp & 63);
-      } else out.push(239, 191, 189);
-    } else if (c >= 56320 && c <= 57343) out.push(239, 191, 189);
-    else out.push(224 | c >> 12, 128 | c >> 6 & 63, 128 | c & 63);
-  }
-  return Uint8Array.from(out);
-}
-function bytesToUtf8(b) {
-  let out = "";
-  for (let i = 0; i < b.length; ) {
-    const c = b[i++];
-    if (c < 128) out += String.fromCharCode(c);
-    else if (c < 224) out += String.fromCharCode((c & 31) << 6 | b[i++] & 63);
-    else if (c < 240) out += String.fromCharCode((c & 15) << 12 | (b[i++] & 63) << 6 | b[i++] & 63);
-    else {
-      const cp = (c & 7) << 18 | (b[i++] & 63) << 12 | (b[i++] & 63) << 6 | b[i++] & 63;
-      const u = cp - 65536;
-      out += String.fromCharCode(55296 + (u >> 10), 56320 + (u & 1023));
-    }
-  }
-  return out;
-}
-function toB64(bytes) {
-  let out = "";
-  for (let i = 0; i < bytes.length; i += 3) {
-    const b0 = bytes[i];
-    const has1 = i + 1 < bytes.length;
-    const has2 = i + 2 < bytes.length;
-    const b1 = has1 ? bytes[i + 1] : 0;
-    const b2 = has2 ? bytes[i + 2] : 0;
-    out += B64[b0 >> 2] + B64[(b0 & 3) << 4 | b1 >> 4];
-    out += has1 ? B64[(b1 & 15) << 2 | b2 >> 6] : "=";
-    out += has2 ? B64[b2 & 63] : "=";
-  }
-  return out;
-}
-function fromB64Lenient(s) {
-  const clean = s.replace(/[^A-Za-z0-9+/]/g, "");
-  const out = [];
-  for (let i = 0; i < clean.length; i += 4) {
-    const c0 = B64.indexOf(clean[i]);
-    const c1 = B64.indexOf(clean[i + 1] ?? "A");
-    const c2 = clean[i + 2] !== void 0 ? B64.indexOf(clean[i + 2]) : -1;
-    const c3 = clean[i + 3] !== void 0 ? B64.indexOf(clean[i + 3]) : -1;
-    out.push(c0 << 2 | c1 >> 4);
-    if (c2 >= 0) out.push((c1 & 15) << 4 | c2 >> 2);
-    if (c3 >= 0) out.push((c2 & 3) << 6 | c3);
-  }
-  return Uint8Array.from(out);
-}
-function fromB64(s) {
-  const bytes = fromB64Lenient(s);
-  if (toB64(bytes) !== s) throw new Error("non-canonical base64");
-  return bytes;
-}
-function concat(parts) {
-  let n = 0;
-  for (const p of parts) n += p.length;
-  const out = new Uint8Array(n);
-  let o = 0;
-  for (const p of parts) {
-    out.set(p, o);
-    o += p.length;
-  }
-  return out;
-}
-function u16be(n) {
-  return Uint8Array.of(n >>> 8 & 255, n & 255);
-}
-function u32be(n) {
-  return Uint8Array.of(n >>> 24 & 255, n >>> 16 & 255, n >>> 8 & 255, n & 255);
-}
-function readU32be(b, o) {
-  return (b[o] << 24 | b[o + 1] << 16 | b[o + 2] << 8 | b[o + 3]) >>> 0;
-}
-function lp(b) {
-  return concat([u32be(b.length), b]);
-}
-function eqCt(a, b) {
-  if (a.length !== b.length) return false;
-  let d = 0;
-  for (let i = 0; i < a.length; i++) d |= a[i] ^ b[i];
-  return d === 0;
-}
-function ensureCsprng() {
-  if (ok) return;
-  let a;
-  let b;
-  try {
-    a = import_tweetnacl.default.randomBytes(32);
-    b = import_tweetnacl.default.randomBytes(32);
-  } catch {
-    throw new Error("paigy-crypto: no secure RNG available \u2014 refusing to generate keys (fail-closed)");
-  }
-  if (a.every((x) => x === 0) || eqCt(a, b)) {
-    throw new Error("paigy-crypto: RNG self-test failed (constant/low-entropy output)");
-  }
-  ok = true;
-}
-function randomBytes(n) {
-  ensureCsprng();
-  return import_tweetnacl.default.randomBytes(n);
-}
-function keyId(publicKeyB64) {
-  return toB64(import_tweetnacl2.default.hash(fromB64(publicKeyB64)).slice(0, 8));
-}
-function credentialBody(c) {
-  return concat([
-    lp(utf8ToBytes("paigy-device-credential-v1")),
-    lp(utf8ToBytes(c.deviceId)),
-    lp(utf8ToBytes(c.kind)),
-    lp(fromB64(c.x25519Pub)),
-    lp(fromB64(c.ed25519Pub))
-  ]);
-}
-function verifyDeviceCredential(cred, uikPublicB64) {
-  const { sig, ...fields } = cred;
-  try {
-    return import_tweetnacl2.default.sign.detached.verify(credentialBody(fields), fromB64(sig), fromB64(uikPublicB64));
-  } catch {
-    return false;
-  }
-}
-function padme(L) {
-  if (L < 2) return L;
-  const E = Math.floor(Math.log2(L));
-  const S = Math.floor(Math.log2(E)) + 1;
-  const lastBits = E - S;
-  if (lastBits <= 0) return L;
-  const mask = (1 << lastBits) - 1;
-  return L + mask & ~mask;
-}
-function canonicalHeader(msgId, hdr) {
-  const parts = [
-    u16be(ENVELOPE_VERSION),
-    lp(utf8ToBytes(ENVELOPE_ALG)),
-    lp(msgId),
-    lp(utf8ToBytes(hdr.field)),
-    lp(utf8ToBytes(hdr.kind)),
-    lp(utf8ToBytes(hdr.senderRole)),
-    u32be(hdr.seq),
-    u32be(hdr.recipientKeyIds.length),
-    ...hdr.recipientKeyIds.map((k) => lp(utf8ToBytes(k)))
-  ];
-  return concat(parts);
-}
-function seal(input) {
-  ensureCsprng();
-  if (input.recipients.length === 0) throw new Error("seal: no recipients");
-  const kind = input.kind ?? "";
-  const recs = input.recipients.map((pub) => ({ pub, id: keyId(pub) })).sort((a, b) => a.id < b.id ? -1 : a.id > b.id ? 1 : 0);
-  const hdr = {
-    field: input.field,
-    kind,
-    senderRole: input.senderRole,
-    recipientKeyIds: recs.map((r) => r.id),
-    seq: input.seq
-  };
-  const msgIdBytes = input.msgId ? fromB64(input.msgId) : randomBytes(16);
-  const cek = randomBytes(32);
-  const canon = canonicalHeader(msgIdBytes, hdr);
-  const plaintext = concat([u32be(canon.length), canon, u32be(input.body.length), input.body]);
-  const padded = new Uint8Array(padme(plaintext.length));
-  padded.set(plaintext);
-  const nonce = randomBytes(24);
-  const ct = import_tweetnacl3.default.secretbox(padded, nonce, cek);
-  const recipients = recs.map((r) => {
-    const eph = import_tweetnacl3.default.box.keyPair();
-    const wnonce = randomBytes(24);
-    const wrap = import_tweetnacl3.default.box(cek, wnonce, fromB64(r.pub), eph.secretKey);
-    return { keyId: r.id, epk: toB64(eph.publicKey), wnonce: toB64(wnonce), wrap: toB64(wrap) };
-  });
-  return {
-    v: ENVELOPE_VERSION,
-    alg: ENVELOPE_ALG,
-    msgId: toB64(msgIdBytes),
-    hdr,
-    recipients,
-    nonce: toB64(nonce),
-    ct: toB64(ct)
-  };
-}
-function open(envelope, myKeyId, mySecretKeyB64) {
-  if (envelope.v !== ENVELOPE_VERSION) throw new Error(`unsupported envelope version ${String(envelope.v)}`);
-  if (envelope.alg !== ENVELOPE_ALG) throw new Error(`unsupported alg ${String(envelope.alg)}`);
-  const rec = envelope.recipients.find((r) => r.keyId === myKeyId);
-  if (!rec) throw new Error("not a recipient of this envelope");
-  const cek = import_tweetnacl3.default.box.open(fromB64(rec.wrap), fromB64(rec.wnonce), fromB64(rec.epk), fromB64(mySecretKeyB64));
-  if (!cek) throw new Error("CEK unwrap failed (wrong key or tampered)");
-  const padded = import_tweetnacl3.default.secretbox.open(fromB64(envelope.ct), fromB64(envelope.nonce), cek);
-  if (!padded) throw new Error("body authentication failed (tampered ciphertext)");
-  if (padded.length < 8) throw new Error("malformed sealed plaintext");
-  const canonLen = readU32be(padded, 0);
-  if (canonLen < 0 || 8 + canonLen > padded.length) throw new Error("malformed sealed plaintext");
-  const sealedCanon = padded.slice(4, 4 + canonLen);
-  const bodyLen = readU32be(padded, 4 + canonLen);
-  const bodyStart = 8 + canonLen;
-  if (bodyStart + bodyLen > padded.length) throw new Error("malformed sealed plaintext");
-  const body = padded.slice(bodyStart, bodyStart + bodyLen);
-  const expected = canonicalHeader(fromB64(envelope.msgId), envelope.hdr);
-  if (!eqCt(sealedCanon, expected)) throw new Error("header mismatch (tampered metadata)");
-  return { header: envelope.hdr, body };
-}
 function sessionSlot(sessionId2) {
   const id = sessionId2 ?? sessionId();
   return `session:${id.slice(0, 8)}`;
@@ -24044,126 +23804,33 @@ function readKeyFile() {
     return null;
   }
 }
-async function fetchRoster(token) {
-  const res = await reach(`${BACKEND_URL}/api/roster`, { headers: { authorization: `Bearer ${token}` } });
-  if (!res.ok) return null;
-  return await res.json().catch(() => null);
-}
-function verifiedRecipients(roster, pinnedUikPub) {
-  return roster.devices.filter((cred) => verifyDeviceCredential(cred, pinnedUikPub)).map((cred) => cred.x25519Pub);
-}
-function sealFields(content, recipients) {
-  if (recipients.length === 0) throw new Error("sealFields: no verified recipients");
-  const seq = Math.floor(Date.now() / 1e3);
-  const out = {};
-  for (const field of ["context", "options", "visuals"]) {
-    if (content[field] === void 0) continue;
-    out[field] = seal({
-      body: utf8ToBytes(JSON.stringify(content[field])),
-      field,
-      senderRole: "agent",
-      seq,
-      recipients
-    });
-  }
-  return out;
-}
-function openSealedAnswer(sealed, keypair) {
-  const myKeyId = keyId(keypair.x25519.publicKey);
-  const { header, body } = open(sealed.envelope, myKeyId, keypair.x25519.secretKey);
-  if (header.field !== "answer" || header.senderRole !== "user") {
-    throw new Error("sealed answer has the wrong envelope field/role \u2014 refusing (possible replay/misattribution)");
-  }
-  const parsed = UserAnswerSchema.safeParse(JSON.parse(bytesToUtf8(body)));
-  if (!parsed.success) throw new Error("sealed answer body is not a valid UserAnswer");
-  const answer = parsed.data;
-  const bodyIsIgnored = answer.kind === "ignored";
-  if (sealed.ignored !== bodyIsIgnored) {
-    throw new Error("sealed answer tamper: `ignored` hint disagrees with the decrypted body");
-  }
-  return answer;
-}
 function ensureAuthed(res) {
   if (res.status === 401) throw new UnpairedError();
   return res;
 }
-async function sealForE2ee(req, token, deps = {}) {
-  const keyFile = (deps.readKeyFile ?? readKeyFile)();
-  if (!keyFile?.e2ee) return req;
-  req = deriveAsk(req);
-  if (!keyFile.uikPub) {
-    throw new Error("E2EE pairing is missing its pinned identity key (key.json.uikPub) \u2014 re-pair; refusing to send plaintext.");
-  }
-  const roster = await (deps.fetchRoster ?? fetchRoster)(token);
-  if (!roster) {
-    throw new Error("E2EE pairing has no device roster to seal to \u2014 refusing to send plaintext. Approve a device on your phone, then retry.");
-  }
-  const recipients = verifiedRecipients(roster, keyFile.uikPub);
-  if (recipients.length === 0) {
-    throw new Error("No roster device verified against the pinned identity key \u2014 refusing to send plaintext (a server-injected device is dropped).");
-  }
-  const sealedContext = {
-    ...req.context,
-    ...req.repo !== void 0 ? { repo: req.repo } : {},
-    ...req.branch !== void 0 ? { branch: req.branch } : {}
-  };
-  const envelope = sealFields({ context: sealedContext, options: req.options, visuals: req.visuals }, recipients);
-  const { context: _c, options: _o, visuals: _v, repo: _r, branch: _b, ...meta } = req;
-  return { ...meta, envelope };
+async function fail(what, res) {
+  throw new ApiError(what, res.status, await res.text());
 }
-async function submitNotification(req, opts = {}) {
+async function claimGoal(goalId, opts = {}) {
   const token = authToken(opts.token) ?? "";
-  if (req.goalId) {
-    if (req.envelope) throw new Error("Goal-scoped contact does not support E2EE envelopes yet");
-    const shaped = deriveAsk(req);
-    if (!shaped.context || !shaped.select) throw new Error("Goal-scoped contact requires a shaped request or ask");
-    if (shaped.channel === "call" || shaped.urgency === "call") {
-      throw new Error("Goal-scoped call contact is not available yet; use a message contact");
-    }
-    if (shaped.urgency && shaped.urgency !== "inbox") throw new Error("Goal-scoped contact currently supports inbox delivery only");
-    if (shaped.points?.length) throw new Error("Goal-scoped multi-part contact is not available yet; send one decision at a time");
-    const content = [shaped.context.title, ...shaped.context.description].filter(Boolean).join("\n\n");
-    const res2 = ensureAuthed(await reach(`${BACKEND_URL}/api/goals/${encodeURIComponent(req.goalId)}/contact`, {
-      method: "POST",
-      headers: { "content-type": "application/json", authorization: `Bearer ${token}`, "x-paigy-model": "goal-entry-v1" },
-      body: JSON.stringify({
-        operationId: randomUUID2(),
-        threadId: shaped.parentId ?? null,
-        content,
-        select: shaped.select,
-        options: shaped.options ?? [],
-        blocking: shaped.blocking,
-        channel: "message"
-      })
-    }));
-    if (!res2.ok) throw new Error(`goal contact failed: ${res2.status} ${await res2.text()}`);
-    return await res2.json();
-  }
-  const body = await sealForE2ee(req, token);
-  const res = ensureAuthed(await reach(`${BACKEND_URL}/api/notify`, {
-    method: "POST",
-    headers: { "content-type": "application/json", authorization: `Bearer ${token}` },
-    body: JSON.stringify(body)
-  }));
-  if (!res.ok) throw new Error(`notify failed: ${res.status} ${await res.text()}`);
+  const res = ensureAuthed(await (opts.reach ?? reach)(`${BACKEND_URL}/api/goals/claim`, { method: "POST", headers: { "content-type": "application/json", authorization: `Bearer ${token}`, "x-paigy-model": "goal-entry-v1" }, body: JSON.stringify(goalId ? { goalId } : {}) }));
+  if (!res.ok) await fail("claim_goal", res);
   return await res.json();
 }
-async function sweepLeased(opts = {}) {
-  const token = authToken(opts.token);
-  const res = ensureAuthed(await reach(`${BACKEND_URL}/api/pending`, {
-    headers: {
-      authorization: `Bearer ${token}`,
-      "x-paigy-await-ack": "1"
-    }
+async function getGoal(goalId, opts = {}) {
+  const token = authToken(opts.token) ?? "";
+  const res = ensureAuthed(await (opts.reach ?? reach)(`${BACKEND_URL}/api/goals/${encodeURIComponent(goalId)}`, {
+    method: "GET",
+    headers: { authorization: `Bearer ${token}`, "x-paigy-model": "goal-entry-v1" }
   }));
-  if (!res.ok) throw new Error(`check_replies failed: ${res.status} ${await res.text()}`);
+  if (!res.ok) await fail("get_goal", res);
   return await res.json();
 }
-async function pendingSummary(opts = {}) {
-  const res = ensureAuthed(await reach(`${BACKEND_URL}/api/pending/summary`, {
-    headers: { authorization: `Bearer ${authToken(opts.token)}` }
-  }));
-  if (!res.ok) throw new Error(`pending_summary failed: ${res.status} ${await res.text()}`);
+async function updateGoal(goalId, input, opts = {}) {
+  const token = authToken(opts.token) ?? "";
+  const operationId = input.operationId ?? randomUUID2();
+  const res = ensureAuthed(await (opts.reach ?? reach)(`${BACKEND_URL}/api/goals/${encodeURIComponent(goalId)}`, { method: "PATCH", headers: { "content-type": "application/json", authorization: `Bearer ${token}`, "x-paigy-model": "goal-entry-v1" }, body: JSON.stringify({ ...input, operationId }) }));
+  if (!res.ok) await fail("update_goal", res);
   return await res.json();
 }
 function overrideToken(secret) {
@@ -24208,6 +23875,15 @@ async function heartbeat(runtime, opts = {}) {
   }));
   if (!res.ok) throw new Error(`heartbeat failed: ${res.status}`);
 }
+async function registerDelivery(mode, opts = {}) {
+  const res = ensureAuthed(await reach(`${BACKEND_URL}/api/delivery`, {
+    method: "POST",
+    headers: { "content-type": "application/json", authorization: `Bearer ${authToken(opts.token)}` },
+    body: JSON.stringify({ mode })
+  }));
+  if (!res.ok) throw new Error(`register_delivery failed: ${res.status} ${await res.text()}`);
+  return await res.json();
+}
 async function listNotes(opts = {}) {
   const res = ensureAuthed(await reach(`${BACKEND_URL}/api/notes`, {
     headers: { authorization: `Bearer ${authToken(opts.token)}` }
@@ -24240,138 +23916,153 @@ async function acceptTriage(proposalId, body, opts = {}) {
   if (!res.ok) throw new Error(`accept_triage failed: ${res.status} ${await res.text()}`);
   return await res.json();
 }
-function decryptAnswer(reply, deps = {}) {
-  if (!reply.sealed) return reply.answer;
-  const keyFile = (deps.readKeyFile ?? readKeyFile)();
-  if (!keyFile?.keypair) {
-    throw new Error(
-      "received a sealed answer but this agent has no device key to open it \u2014 re-pair."
-    );
+async function contact(input, opts = {}) {
+  const parsed = ContactSchema.parse(input);
+  opts.signal?.throwIfAborted();
+  const send2 = opts.reach ?? reach;
+  const headers = { "content-type": "application/json", authorization: `Bearer ${authToken(opts.token) ?? ""}`, "x-paigy-model": "goal-entry-v1" };
+  let deliveryId;
+  if ("deliveryId" in parsed) deliveryId = parsed.deliveryId;
+  else {
+    if (!opts.reach && readKeyFile()?.e2ee) throw new Error("Goal contact does not support E2EE yet; refusing to send plaintext.");
+    const shaped = deriveAsk(NotifyRequestSchema.parse({ ask: parsed.ask, waiting: parsed.waiting, options: parsed.options }));
+    const res = ensureAuthed(await send2(`${BACKEND_URL}/api/goals/${parsed.goalIds[0]}/contact`, {
+      method: "POST",
+      headers,
+      signal: opts.signal,
+      body: JSON.stringify({ operationId: opts.operationId ?? randomUUID3(), threadId: parsed.threadId ?? null, content: parsed.ask, select: shaped.select, options: shaped.options ?? [], blocking: parsed.waiting === "hard", channel: parsed.channel === "call" ? "call" : "message" })
+    }));
+    if (!res.ok) await fail("goal contact", res);
+    const receipt = await res.json();
+    deliveryId = receipt.deliveryId ?? receipt.callId ?? receipt.notificationId ?? "";
+    if (!deliveryId) throw new Error("Goal contact returned no Delivery identity");
+  }
+  const read = async (signal2) => {
+    const res = ensureAuthed(await send2(`${BACKEND_URL}/api/deliveries/${encodeURIComponent(deliveryId)}`, { headers, signal: signal2 }));
+    if (!res.ok) await fail("read_delivery", res);
+    const delivery = await res.json();
+    return delivery.kind === "notification" ? { ...delivery, message: `${delivery.message}
+Inbox delivery is asynchronous; use claim_goal/get_goal to collect durable answers. Do not poll this Notification.` } : delivery;
+  };
+  const settled = (d) => d.kind === "notification" || d.state === "closed" || d.answers.length > 0 || d.entries.some((e) => e.kind === "contribution");
+  if (opts.waits === false) return read(opts.signal);
+  const window = AbortSignal.timeout(AWAIT_WINDOW_MS);
+  const signal = opts.signal ? AbortSignal.any([opts.signal, window]) : window;
+  let latest;
+  try {
+    while (true) {
+      signal.throwIfAborted();
+      latest = await read(signal);
+      if (settled(latest)) return latest;
+      await sleep2(5e3, void 0, { signal });
+    }
+  } catch (error) {
+    opts.signal?.throwIfAborted();
+    if (window.aborted && latest) return latest;
+    throw error;
   }
-  return openSealedAnswer(reply.sealed, keyFile.keypair);
-}
-function decodeReply(item, deps = {}) {
-  const { delivery: _delivery, ...withoutDelivery } = item;
-  const enriched = { ...withoutDelivery };
-  if (!enriched.sealed) return enriched;
-  const answer = decryptAnswer(enriched, deps);
-  const { sealed: _sealed, ...plaintext } = enriched;
-  return { ...plaintext, answer };
 }
-function deliveryOf(item) {
-  if (item.type !== "reply" || !("delivery" in item) || item.delivery === void 0) {
-    return null;
-  }
-  const delivery = item.delivery;
-  if (!delivery || typeof delivery.leaseId !== "string" || !delivery.leaseId || typeof delivery.expiresAt !== "string" || !delivery.expiresAt) {
-    throw new Error(
-      "Paigy returned invalid reply-delivery metadata; the answer was not acknowledged and remains recoverable."
-    );
-  }
-  return delivery;
+async function checkReplies(opts = {}) {
+  const res = ensureAuthed(await (opts.reach ?? reach)(`${BACKEND_URL}/api/deliveries`, {
+    headers: { authorization: `Bearer ${authToken(opts.token) ?? ""}`, "x-paigy-model": "goal-entry-v1" }
+  }));
+  if (!res.ok) await fail("check_replies", res);
+  return await res.json();
 }
-async function responseDetail(res) {
+function frame(line, topic, event, payload) {
   try {
-    return (await res.text()).slice(0, 300);
+    line.ws?.send(JSON.stringify({ topic, event, payload, ref: String(++line.ref) }));
   } catch {
-    return "";
   }
 }
-async function acknowledge(token, leaseId, opts = {}) {
-  const attempts = Math.max(1, Math.min(opts.attempts ?? 3, 5));
-  const backoffMs = Math.max(0, opts.backoffMs ?? 100);
-  const doSleep = opts.doSleep ?? sleep3;
-  let lastError;
-  for (let attempt = 0; attempt < attempts; attempt += 1) {
+function stop(line) {
+  line.open = false;
+  clearInterval(line.heart);
+  clearTimeout(line.retry);
+}
+function connect(line) {
+  const base = line.url.replace(/^http/, "ws").replace(/\/+$/, "");
+  const ws = line.ws = new import_undici.WebSocket(`${base}/realtime/v1/websocket?apikey=${encodeURIComponent(line.anonKey)}&vsn=1.0.0`);
+  ws.addEventListener("open", () => {
+    line.open = true;
+    line.attempt = 0;
+    for (const topic of line.topics.keys()) frame(line, `realtime:${topic}`, "phx_join", JOIN);
+    line.heart = setInterval(() => frame(line, "phoenix", "heartbeat", {}), HEARTBEAT_MS);
+  });
+  ws.addEventListener("message", (e) => {
+    let m;
     try {
-      const res = ensureAuthed(await reach(`${BACKEND_URL}/api/await/ack`, {
-        method: "POST",
-        headers: {
-          authorization: `Bearer ${token}`,
-          "content-type": "application/json"
-        },
-        body: JSON.stringify({ leaseId })
-      }));
-      if (res.ok) return;
-      const detail2 = await responseDetail(res);
-      if (res.status === 409) throw new ReplyLeaseExpiredError();
-      const retryable = res.status === 408 || res.status === 425 || res.status === 429 || res.status >= 500;
-      throw new ReplyAckError(
-        `Paigy reply acknowledgement failed: ${res.status}${detail2 ? ` ${detail2}` : ""}`,
-        retryable
-      );
-    } catch (error) {
-      if (error instanceof UnpairedError || error instanceof ReplyLeaseExpiredError || error instanceof ReplyAckError && !error.retryable) {
-        throw error;
-      }
-      lastError = error;
-      if (attempt + 1 < attempts) {
-        await doSleep(backoffMs * 2 ** attempt);
-      }
+      m = JSON.parse(String(e.data));
+    } catch {
+      return;
+    }
+    if (m.event !== "broadcast" || !m.topic?.startsWith("realtime:")) return;
+    for (const l of line.topics.get(m.topic.slice("realtime:".length)) ?? []) {
+      if (m.payload?.event === l.event) l.onMessage(m.payload.payload);
     }
-  }
-  const detail = lastError instanceof Error ? lastError.message : String(lastError);
-  throw new Error(
-    `Could not acknowledge the Paigy reply after ${attempts} attempts (${detail}). The answer was not returned to the agent and remains recoverable after the lease expires.`
-  );
-}
-async function receiveReply(item, token, opts = {}) {
-  const decoded = decodeReply(item, opts);
-  const delivery = deliveryOf(item);
-  if (!delivery) {
-    if (opts.requireDelivery) {
-      throw new Error("Paigy returned a catch-up reply without a delivery lease; the answer was not exposed.");
-    }
-    return decoded;
-  }
-  await acknowledge(token, delivery.leaseId, {
-    attempts: opts.ackAttempts,
-    backoffMs: opts.ackBackoffMs,
-    doSleep: opts.ackSleep
   });
-  return decoded;
+  let gone = false;
+  const again = () => {
+    if (gone) return;
+    gone = true;
+    stop(line);
+    if (!line.topics.size) return;
+    line.retry = setTimeout(() => connect(line), RETRY_MS[Math.min(line.attempt++, RETRY_MS.length - 1)]);
+  };
+  ws.addEventListener("close", again);
+  ws.addEventListener("error", again);
 }
-async function checkReplies(opts = {}) {
-  const pending = await sweepLeased(opts);
-  const token = authToken(opts.token) ?? "";
-  const replies = await Promise.all(pending.replies.map(async (reply) => {
-    const received = await receiveReply(
-      { type: "reply", ...reply },
-      token,
-      { requireDelivery: true }
-    );
-    const { type: _type, ...withoutType } = received;
-    return withoutType;
-  }));
+function subscribeRealtime(args) {
+  const key = `${args.url} ${args.anonKey}`;
+  let line = lines.get(key);
+  if (!line) lines.set(key, line = { url: args.url, anonKey: args.anonKey, open: false, attempt: 0, ref: 0, topics: /* @__PURE__ */ new Map() });
+  let heard = line.topics.get(args.topic);
+  if (!heard) {
+    line.topics.set(args.topic, heard = /* @__PURE__ */ new Set());
+    if (line.open) frame(line, `realtime:${args.topic}`, "phx_join", JOIN);
+  }
+  const me = { event: args.event, onMessage: args.onMessage };
+  heard.add(me);
+  if (!line.ws) connect(line);
   return {
-    ...pending,
-    replies,
-    work: pending.work ?? []
+    close: () => {
+      if (!heard.delete(me) || heard.size) return;
+      line.topics.delete(args.topic);
+      if (line.topics.size) {
+        if (line.open) frame(line, `realtime:${args.topic}`, "phx_leave", {});
+        return;
+      }
+      lines.delete(key);
+      stop(line);
+      try {
+        line.ws?.close();
+      } catch {
+      }
+    }
   };
 }
-async function patchState(path, state, opts, operation) {
-  const token = authToken(opts.token) ?? "";
-  const res = ensureAuthed(await reach(
-    `${BACKEND_URL}${path}`,
-    {
-      method: "PATCH",
-      headers: {
-        "content-type": "application/json",
-        authorization: `Bearer ${token}`,
-        "x-paigy-await-ack": "1"
-      },
-      body: JSON.stringify({ state })
+async function subscribeWake(onNudge, opts = {}) {
+  const cfg = await registerDelivery("self_hosted", opts);
+  const { url, anonKey } = cfg.realtime;
+  const channel = wakeChannel(cfg.tokenId);
+  const ch = subscribeRealtime({
+    url,
+    anonKey,
+    topic: channel,
+    event: WAKE_EVENT,
+    onMessage: (payload) => onNudge(payload ?? {})
+  });
+  return {
+    tokenId: cfg.tokenId,
+    channel,
+    close: async () => {
+      ch.close();
+      await registerDelivery("poll", opts).catch(() => {
+      });
     }
-  ));
-  if (!res.ok) {
-    throw new Error(`${operation} failed: ${res.status} ${await res.text()}`);
-  }
-  return await res.json();
-}
-function setTaskState(notificationId, state, opts = {}) {
-  return patchState(`/api/notify/${encodeURIComponent(notificationId)}/state`, state, opts, "set_task_state");
+  };
 }
-var require2, __create2, __defProp2, __getOwnPropDesc2, __getOwnPropNames2, __getProtoOf2, __hasOwnProp2, __require2, __commonJS2, __copyProps2, __toESM2, require_nacl_fast, BACKEND_URL, NETWORK_MSG, PROXY_ENV, agent, INSTANCE_ID, WORKSPACE_ID, envSession, SESSION_ID, ignoreOverride, defaultOptions, getDefaultOptions, getRefs, getRelativePath, parseCatchDef, integerDateParser, isJsonSchema7AllOfType, emojiRegex2, zodPatterns, ALPHA_NUMERIC, primitiveMappings, asAnyOf, parseOptionalDef, parsePipelineDef, parseReadonlyDef, selectParser, get$ref, addMeta, zodToJsonSchema, OPTIONS_MIN, OPTIONS_MAX, MISSED_CALL_PLAN, CreateGoalSchema, UpdateGoalSchema, UpdateGoalToolSchema, ClaimGoalSchema, fmtMin, STANDARD_MEANS, CONTACT_DESCRIPTION, ContextSchema, ParticipantSchema, TransformSchema, OptionSchema, VisualSchema, NotifyLevelSchema, SelectShapeSchema, ReceiptEventSchema, AttentionSchema, NotifyRequestFields, NotifyRequestSchema, NotifyStatusSchema, AgentStateSchema, SetTaskStateSchema, SetWorkStateSchema, TurnSchema, UserAnswerSchema, IntentSchema, RideAlongSchema, AwaitItemSchema, CallbackTriggerSchema, ScheduleCallbackSchema, PendingRepliesSchema, NotifyResponseSchema, NotifyPlanUnitSchema, NotifyPlanSchema, UserResponseSchema, VoiceKeySchema, AgendaTurnSchema, CLAIM_STALE_MS, InboxItemSchema, SnoozeRequestSchema, APNS_TOKEN_RE, PushTokenSchema, MissedCallSchema, BrokerTuningSchema, UserSettingsSchema, HistoryItemSchema, ACTIVITY_LINES, ACTIVITY_LINE_MAX, AgentActivitySchema, ConnectionSummarySchema, LedgerItemSchema, AgentLedgerSchema, ReassignResultSchema, MoveRingSchema, MoveSchema, CreateRequestSchema, HandoffSchema, NoteSourceSchema, NoteStatusSchema, NoteRepeatSchema, DecisionSchema, NoteSchema, CreateNoteSchema, RecordDecisionSchema, AssignNoteSchema, TriageVerdictSchema, TriageItemSchema, TriageAssignmentSchema, TriageStatusSchema, SubmitTriageSchema, TriageProposalSchema, AcceptTriageSchema, AcceptTriageResultSchema, DeliveryModeSchema, RegisterDeliverySchema, OAuthStartSchema, DeliveryConfigSchema, StatusSchema, EnvelopeRecipientSchema, EnvelopeHeaderSchema, EnvelopeSchema, SealedAnswerSchema, DeviceCredentialSchema, DeviceRosterSchema, WakeNudgeSchema, PairingStatusSchema, PairingRevealSchema, DeviceCodeRequestSchema, DeviceCodeSchema, DeviceInfoSchema, DeviceTokenRequestSchema, DeviceTokenSchema, DeviceCommitRequestSchema, DevicePeerCommitSchema, SupportRequestSchema, NotificationFeedbackKindSchema, NotificationFeedbackSchema, FeedbackResolutionSchema, FeedbackOutcomeSchema, CONTACT_SCHEMA, import_tweetnacl, import_tweetnacl2, import_tweetnacl3, import_tweetnacl4, import_tweetnacl5, B64, ok, ENVELOPE_VERSION, ENVELOPE_ALG, AGENT_NAME, TOKEN_PATH, KEY_PATH, sleep, UnpairedError, tokenOverride, authToken, sleep3, ReplyLeaseExpiredError, ReplyAckError;
+var import_undici, require2, __create2, __defProp2, __getOwnPropDesc2, __getOwnPropNames2, __getProtoOf2, __hasOwnProp2, __require2, __commonJS2, __copyProps2, __toESM2, require_nacl_fast, BACKEND_URL, NETWORK_MSG, PROXY_ENV, agent, INSTANCE_ID, WORKSPACE_ID, envSession, SESSION_ID, ignoreOverride, defaultOptions, getDefaultOptions, getRefs, getRelativePath, parseCatchDef, integerDateParser, isJsonSchema7AllOfType, emojiRegex2, zodPatterns, ALPHA_NUMERIC, primitiveMappings, asAnyOf, parseOptionalDef, parsePipelineDef, parseReadonlyDef, selectParser, get$ref, addMeta, zodToJsonSchema, OPTIONS_MIN, OPTIONS_MAX, StartContactSchema, ContactSchema, CONTACT_SCHEMA, CONTACT_DESCRIPTION, CreateGoalSchema, CreateGoalToolSchema, CREATE_GOAL_DESCRIPTION, UpdateGoalSchema, UpdateGoalToolSchema, ClaimGoalSchema, GetGoalSchema, GET_GOAL_DESCRIPTION, UPDATE_GOAL_DESCRIPTION, CLAIM_GOAL_DESCRIPTION, CHECK_REPLIES_DESCRIPTION, CheckRepliesSchema, GetThreadSchema, GET_THREAD_DESCRIPTION, SearchThreadsSchema, SEARCH_THREADS_DESCRIPTION, AGENT_TOOLS, AGENT_TOOL_NAMES, ContextSchema, ParticipantSchema, TransformSchema, OptionSchema, VisualSchema, NotifyLevelSchema, SelectShapeSchema, ReceiptEventSchema, AttentionSchema, NotifyRequestFields, NotifyRequestSchema, NotifyStatusSchema, AgentStateSchema, TurnSchema, UserAnswerSchema, IntentSchema, RideAlongSchema, AwaitItemSchema, CallbackTriggerSchema, NotifyResponseSchema, NotifyPlanUnitSchema, NotifyPlanSchema, UserResponseSchema, VoiceKeySchema, AgendaTurnSchema, CLAIM_STALE_MS, InboxItemSchema, SnoozeRequestSchema, APNS_TOKEN_RE, PushTokenSchema, MissedCallSchema, BrokerTuningSchema, UserSettingsSchema, HistoryItemSchema, ACTIVITY_LINES, ACTIVITY_LINE_MAX, AgentActivitySchema, ConnectionSummarySchema, LedgerItemSchema, AgentLedgerSchema, ReassignResultSchema, MoveRingSchema, MoveSchema, CreateRequestSchema, QueueQuestionSchema, QueueItemSchema, NoteSourceSchema, NoteStatusSchema, NoteRepeatSchema, DecisionSchema, NoteSchema, CreateNoteSchema, RecordDecisionSchema, AssignNoteSchema, TriageVerdictSchema, TriageItemSchema, TriageAssignmentSchema, TriageStatusSchema, SubmitTriageSchema, TriageProposalSchema, AcceptTriageSchema, AcceptTriageResultSchema, DeliveryModeSchema, WAKE_EVENT, wakeChannel, RegisterDeliverySchema, OAuthStartSchema, DeliveryConfigSchema, StatusSchema, EnvelopeRecipientSchema, EnvelopeHeaderSchema, EnvelopeSchema, SealedAnswerSchema, DeviceCredentialSchema, DeviceRosterSchema, WakeNudgeSchema, PairingStatusSchema, PairingRevealSchema, DeviceCodeRequestSchema, DeviceCodeSchema, DeviceInfoSchema, DeviceTokenRequestSchema, DeviceTokenSchema, DeviceCommitRequestSchema, DevicePeerCommitSchema, SupportRequestSchema, NotificationFeedbackKindSchema, NotificationFeedbackSchema, FeedbackResolutionSchema, FeedbackOutcomeSchema, import_tweetnacl, import_tweetnacl2, import_tweetnacl3, import_tweetnacl4, import_tweetnacl5, AGENT_NAME, TOKEN_PATH, KEY_PATH, sleep, UnpairedError, ApiError, AWAIT_WINDOW_MS, tokenOverride, authToken, HEARTBEAT_MS, RETRY_MS, JOIN, lines;
 var init_dist = __esm({
   "../../packages/sdk/dist/index.js"() {
     "use strict";
@@ -24380,6 +24071,8 @@ var init_dist = __esm({
     init_v3();
     init_v3();
     init_v3();
+    init_zod();
+    import_undici = __toESM(require_undici(), 1);
     require2 = __sdkCreateRequire(import.meta.url);
     __create2 = Object.create;
     __defProp2 = Object.defineProperty;
@@ -24710,17 +24403,17 @@ var init_dist = __esm({
           }
           var sigma = new Uint8Array([101, 120, 112, 97, 110, 100, 32, 51, 50, 45, 98, 121, 116, 101, 32, 107]);
           function crypto_stream_salsa20_xor(c, cpos, m, mpos, b, n, k) {
-            var z3 = new Uint8Array(16), x = new Uint8Array(64);
+            var z4 = new Uint8Array(16), x = new Uint8Array(64);
             var u, i;
-            for (i = 0; i < 16; i++) z3[i] = 0;
-            for (i = 0; i < 8; i++) z3[i] = n[i];
+            for (i = 0; i < 16; i++) z4[i] = 0;
+            for (i = 0; i < 8; i++) z4[i] = n[i];
             while (b >= 64) {
-              crypto_core_salsa20(x, z3, k, sigma);
+              crypto_core_salsa20(x, z4, k, sigma);
               for (i = 0; i < 64; i++) c[cpos + i] = m[mpos + i] ^ x[i];
               u = 1;
               for (i = 8; i < 16; i++) {
-                u = u + (z3[i] & 255) | 0;
-                z3[i] = u & 255;
+                u = u + (z4[i] & 255) | 0;
+                z4[i] = u & 255;
                 u >>>= 8;
               }
               b -= 64;
@@ -24728,30 +24421,30 @@ var init_dist = __esm({
               mpos += 64;
             }
             if (b > 0) {
-              crypto_core_salsa20(x, z3, k, sigma);
+              crypto_core_salsa20(x, z4, k, sigma);
               for (i = 0; i < b; i++) c[cpos + i] = m[mpos + i] ^ x[i];
             }
             return 0;
           }
           function crypto_stream_salsa20(c, cpos, b, n, k) {
-            var z3 = new Uint8Array(16), x = new Uint8Array(64);
+            var z4 = new Uint8Array(16), x = new Uint8Array(64);
             var u, i;
-            for (i = 0; i < 16; i++) z3[i] = 0;
-            for (i = 0; i < 8; i++) z3[i] = n[i];
+            for (i = 0; i < 16; i++) z4[i] = 0;
+            for (i = 0; i < 8; i++) z4[i] = n[i];
             while (b >= 64) {
-              crypto_core_salsa20(x, z3, k, sigma);
+              crypto_core_salsa20(x, z4, k, sigma);
               for (i = 0; i < 64; i++) c[cpos + i] = x[i];
               u = 1;
               for (i = 8; i < 16; i++) {
-                u = u + (z3[i] & 255) | 0;
-                z3[i] = u & 255;
+                u = u + (z4[i] & 255) | 0;
+                z4[i] = u & 255;
                 u >>>= 8;
               }
               b -= 64;
               cpos += 64;
             }
             if (b > 0) {
-              crypto_core_salsa20(x, z3, k, sigma);
+              crypto_core_salsa20(x, z4, k, sigma);
               for (i = 0; i < b; i++) c[cpos + i] = x[i];
             }
             return 0;
@@ -25631,12 +25324,12 @@ var init_dist = __esm({
             for (a = 0; a < 16; a++) o[a] = c[a];
           }
           function crypto_scalarmult(q, n, p) {
-            var z3 = new Uint8Array(32);
+            var z4 = new Uint8Array(32);
             var x = new Float64Array(80), r, i;
             var a = gf(), b = gf(), c = gf(), d = gf(), e = gf(), f = gf();
-            for (i = 0; i < 31; i++) z3[i] = n[i];
-            z3[31] = n[31] & 127 | 64;
-            z3[0] &= 248;
+            for (i = 0; i < 31; i++) z4[i] = n[i];
+            z4[31] = n[31] & 127 | 64;
+            z4[0] &= 248;
             unpack25519(x, p);
             for (i = 0; i < 16; i++) {
               b[i] = x[i];
@@ -25644,7 +25337,7 @@ var init_dist = __esm({
             }
             a[0] = d[0] = 1;
             for (i = 254; i >= 0; --i) {
-              r = z3[i >>> 3] >>> (i & 7) & 1;
+              r = z4[i >>> 3] >>> (i & 7) & 1;
               sel25519(a, b, r);
               sel25519(c, d, r);
               A(e, a, c);
@@ -27014,21 +26707,54 @@ var init_dist = __esm({
     };
     OPTIONS_MIN = 2;
     OPTIONS_MAX = 6;
-    MISSED_CALL_PLAN = {
-      retry_10m: { kind: "every", minutes: 10 },
-      retry_30m: { kind: "every", minutes: 30 },
-      retry_60m: { kind: "every", minutes: 60 },
-      backoff_gentle: { kind: "at", minutes: [30, 120, 360] },
-      backoff_standard: { kind: "at", minutes: [10, 30, 120] },
-      backoff_aggressive: { kind: "at", minutes: [5, 15, 45] },
-      inbox: { kind: "once" },
-      dismiss: { kind: "grace", minutes: 2 }
-    };
+    StartContactSchema = external_exports.object({
+      goalIds: external_exports.tuple([external_exports.string().uuid()]),
+      // THE ASK IS THE QUESTION, not a bulletin with a question at the end (2026-09-16).
+      //
+      // A DecisionNeed is settled only by an answer in the shape THIS ask declares. Bundle news,
+      // findings and a decision into one, and the person answers whichever part engaged them —
+      // which settles nothing, leaves the need open, and gets them asked again. On call 619c5a92
+      // one ask carried a briefing, a side question ("the ring should show the agent's name now —
+      // what did you actually see?") and a one-of-four about how far an erase reaches. The owner
+      // answered the side question. The need stayed open; the card asked again. Of the 45 call
+      // asks carrying a decision, 27 are over 600 characters.
+      //
+      // Sending them separately costs nothing, because a CALL contact joins the call already
+      // happening (`goal/store.ts`, JOIN BEFORE MINTING) — several contacts on one Goal arrive as
+      // one call, planned as its turns, and each keeps its own settleable need.
+      ask: external_exports.string().trim().min(1).max(1e4).describe(
+        "The question, and only what is needed to answer it. News, progress and findings are their own contact \u2014 a call contact JOINS a call already happening, so several arrive as one call. Do not bundle: a DecisionNeed is settled only by an answer in the shape this ask declares, so someone who answers the part that interested them settles nothing and is asked again."
+      ),
+      waiting: external_exports.enum(["none", "hard"]).default("none"),
+      channel: external_exports.enum(["notification", "call"]).default("notification"),
+      options: external_exports.array(external_exports.object({ label: external_exports.string().trim().min(1).max(1e3), image: external_exports.string().url().optional(), html: external_exports.string().max(16384).optional() }).strict()).min(2).max(6).optional(),
+      threadId: external_exports.string().uuid().optional().describe("Continue an existing Thread: the threadId a prior Delivery returned. Omit to start a new Thread.")
+    }).strict();
+    ContactSchema = external_exports.union([StartContactSchema, external_exports.object({ deliveryId: external_exports.string().uuid() }).strict()]);
+    CONTACT_SCHEMA = { type: "object", ...mcpInputSchema(ContactSchema) };
+    CONTACT_DESCRIPTION = "Contact the user about exactly one existing Goal: pass goalIds:[goalId], ask, channel:'notification'|'call', and waiting:'none'|'hard'. Options supply choices. Notification returns immediately; collect durable answers with claim_goal/get_goal. On stdio, a Call holds one cancellable ~45s window; continue with ONLY {deliveryId}. Continuation sends nothing and rereads the same durable evidence, including previously read answers. Entries retain authorship and provenance; accepted decisions are separate from quoted speech. Call state open does not mean ringing. Unsupported: soft waiting, multiple Goals/questions, outcome admission, and re-presentation of an existing request. Create a Goal explicitly first; never resend a pending ask to continue waiting.";
     CreateGoalSchema = external_exports.object({
       outcome: external_exports.string().trim().min(1).max(1e4),
       ownerParticipant: external_exports.string().trim().min(1).optional(),
-      idempotencyKey: external_exports.string().trim().min(1).max(200)
+      idempotencyKey: external_exports.string().trim().min(1).max(200),
+      /** A past conversation this Goal should be read against — History's "new session from this"
+       *  (owner, on the call of 2026-09-14: "let's do the reference with the threading"). A
+       *  reference only: the owner reads it through `get_thread`, which does its own scoping, and
+       *  the writer refuses a thread belonging to another account. */
+      contextThreadId: external_exports.string().uuid().optional(),
+      /** THE GOAL THIS ONE BELONGS UNDER (owner, 2026-09-15: "the ask I gave for the design doc
+       *  didn't get created as a child goal of the voice UI goal, which is how it should've
+       *  worked"). It could not have been: this door took no parent, so the only route was
+       *  create -> claim -> `update_goal`, three calls with a lease in the middle, and every agent
+       *  took the short one. The hierarchy has been modelled since Goals existed and had been used
+       *  ZERO times in 2,031 of them. Absent, the server judges it against the caller's open Goals
+       *  (`apps/api/src/goal/intake.ts`). The writer refuses a Goal belonging to another account. */
+      parentGoalId: external_exports.string().uuid().optional()
     });
+    CreateGoalToolSchema = CreateGoalSchema.extend({
+      idempotencyKey: CreateGoalSchema.shape.idempotencyKey.optional().describe("Optional. One is minted per call; pass your own only so a retry lands on the same Goal.")
+    }).strict();
+    CREATE_GOAL_DESCRIPTION = "Create a durable Goal for an outcome. Without parentGoalId it is placed against your open Goals: if one already IS this work, that Goal comes back (existing: true) and nothing new is created \u2014 continue it; if the work belongs under one, it is created there (parentGoalId in the receipt); otherwise it is a root. Pass parentGoalId yourself to put it under a specific Goal. Admission only: the owner must claim it before doing work, then update it as it advances. Returns an admission receipt with goalId, current state, revision, ownerParticipant, and the next step; no Goal content or execution lease.";
     UpdateGoalSchema = external_exports.object({
       revision: external_exports.number().int().positive(),
       changes: external_exports.object({
@@ -27044,17 +26770,33 @@ var init_dist = __esm({
       reason: external_exports.string().trim().min(1).max(2e3),
       operationId: external_exports.string().uuid().optional()
     }).strict();
-    UpdateGoalToolSchema = UpdateGoalSchema.extend({ goalId: external_exports.string().uuid() }).strict();
+    UpdateGoalToolSchema = UpdateGoalSchema.omit({ operationId: true }).extend({ goalId: external_exports.string().uuid() }).strict();
     ClaimGoalSchema = external_exports.object({ goalId: external_exports.string().uuid().optional() }).strict();
-    fmtMin = (m) => m >= 60 ? `${m / 60} hr` : `${m} min`;
-    STANDARD_MEANS = (() => {
-      const plan = MISSED_CALL_PLAN.backoff_standard;
-      const mins = plan.kind === "at" ? plan.minutes : [];
-      const parts = mins.map(fmtMin);
-      const list = parts.length > 1 ? `${parts.slice(0, -1).join(", ")} and ${parts[parts.length - 1]}` : parts[0] ?? "";
-      return `Rings again ${list} after the missed call, then leaves it in your inbox`;
-    })();
-    CONTACT_DESCRIPTION = `Reach the user through Paigy \u2014 tell them something, or ask and get their answer. State what you need in \`ask\`, say what happens to your work while you wait in \`waiting\`, and Paigy handles the rest (channel, phrasing, answer format). If the user explicitly asks you to CALL them, send waiting:'hard' and say so in the ask. Returns { notificationId, parentId, workId?, goalId?, entryId?, decisionId?, wait? }. WHEN IT RANG, contact holds the first ~45 s window ITSELF and \`wait\` carries the outcome: { type:'reply', answer } to act on; { type:'partial', inFlight:true, turn } \u2014 what the user is saying to each turn, provisional: use it to PREPARE (fetch, draft, warm the build), never to act irreversibly, they can still revise it until the final reply (partial = intelligence, settled = authorization; if a partial's acts carry a question aimed at you and you know the answer, contact on the SAME parentId right away \u2014 they hear it on the same call); { type:'remind', remindInSeconds } \u2014 schedule a wake-up; { type:'idle' } \u2014 still waiting. TO KEEP WAITING, call contact again with ONLY { wait: notificationId } \u2014 no ask, nothing new is sent; it holds the next scoped ~45 s window (under the 60 s host cap, so it always returns) and never returns another notification's reply. Keep doing that until the reply \u2014 THAT one is the decision \u2014 so the user steps away and comes back to find you already continued; stop only to do other work and check back, or after an unreasonably long stretch worth telling them about. A message delivery has NO \`wait\`: never poll for it \u2014 the reply arrives through check_replies or your wake. Pass parentId to a later contact to continue the conversation. A Goal-targeted contact also returns goalId and entryId for the durable Goal entry. When it rang, the reply also carries { ifMissed: { mode, means } }: what the user's own policy does with a call they don't take ("${STANDARD_MEANS}"), so a no-answer tells you how long to wait before coming back. THREADING REPLACES: a threaded follow-up SUPERSEDES your earlier pending items on that thread \u2014 right for updates to one ask, WRONG for a checklist (send independent to-dos un-threaded). A threaded re-send with IDENTICAL content escalates the pending ask in place. If a reply comes back as {kind:'clarify', chunks:[...]}, the user wants more detail \u2014 contact again on the SAME parentId with an expanded ask. BLOCKED ON A DECISION for existing work? Pass that work's \`workId\`; the reply returns the same workId plus a decisionId, so the answer resumes the right outcome. ONE ASK, ONE ROW: never restate a still-pending ask's question inside a NEW contact (e.g. weaving it into a briefing) \u2014 the whole answer settles on the new row and the original can never receive it. Keep waiting on the original (a live call reads every pending ask out separately, each answer routes to its own row), and use \`needs\` for a genuinely multi-part NEW ask. ANSWERABLE, NOT JUST ASKED: when the reply comes back carrying \`plan.units[].needs\`, that unit asked for something it gave the user no way to answer \u2014 'options' means it posed a choice with nothing to choose from, 'visuals' means it asked about something to look at with nothing to look at. Send it again on the SAME parentId with ${OPTIONS_MIN}-${OPTIONS_MAX} options (or the image), drawn from your own sentence. Paigy will not add them for you: a shape it guessed wrong cannot be undone, and you are the one who knows what the real alternatives are. \`units\` reports WHAT BECAME OF YOUR PROSE \u2014 { kept, raw, why }: how many topics Paigy compressed for delivery, how many kept your exact words, and the reason when it kept them (e.g. 'no_output' = compression produced nothing usable, so the user got your raw sentence). It needs no action and is not an error \u2014 read it only when the delivered wording matters to you; a high \`raw\` count means the user is hearing you verbatim. READING A CALL'S REPLY: it can come back as {kind:'turns', turns:[{prompt,reply}]} \u2014 the ordered log of that call. Read turns[0].reply as the user's main instruction. Usually that's the only turn; if there are more (e.g. an end-of-call 'call me back when it's done / I have a question that blocks me'), read each one in order as a further follow-up instruction, not a single combined one. If they asked for a callback, re-engage in the SAME thread (contact with the reply's parentId) when the task is done or you hit a blocker \u2014 waiting:'hard' for a blocker, waiting:'none' for done. Paigy has no scheduler; the callback is yours to send (use ScheduleWakeup/cron for timing). A call-mapped answer may carry \`intents\` \u2014 next steps the user attached, each { kind, detail } with detail quoting their words. ACT on them, don't just read them: 'defer' ("call me after lunch") \u2192 register it NOW with schedule_callback \u2014 when the intent carries \`dueInSeconds\` (Paigy pre-parsed the spoken time against the user's clock) pass it straight through; otherwise derive it from the detail yourself \u2014 then follow up on the same thread; 'delegate' ("you pick") \u2192 make the call yourself and tell them what you chose; 'channel' ("text me next time") \u2192 honor it on your next contact (channel:'message'); 'question' (an open question aimed back at you that the call couldn't answer) \u2192 you OWE them the answer \u2014 work it out and follow up on the same thread without being asked, the call deliberately skipped "should I call you back?" because the follow-up is implied. \`transcript\` is the user's raw words behind a shaped answer \u2014 read it for hedges and conditions ("yes, IF tests pass") before acting. If your ask declared \`points\`, the reply carries \`covered\` \u2014 the points actually addressed. Compare against what you declared: a missing point is STILL unanswered \u2014 re-ask it (contact on the same parentId) or proceed knowingly partial; never treat a partial answer as complete.`;
+    GetGoalSchema = external_exports.object({ goalId: external_exports.string().uuid() }).strict();
+    GET_GOAL_DESCRIPTION = "Read the current authorized Goal brief: state, owner, blockers, open decisions, progress, and the next operation. Foreign or sibling-owned Goals are not disclosed.";
+    UPDATE_GOAL_DESCRIPTION = "Update an owned Goal at an exact revision. State, ownership, dependencies, children, progress, and review acknowledgement are explicit; stale revisions are rejected. Returns the new revision and a prose summary.";
+    CLAIM_GOAL_DESCRIPTION = "Claim the oldest runnable or review-pending Goal you own, or pass goalId to claim that Goal. Returns a Goal-scoped brief, current revision, blockers, and the next valid operation. Claiming creates or renews the execution lease.";
+    CHECK_REPLIES_DESCRIPTION = "Your open Deliveries: every Notification or Call currently addressed to you \u2014 a request the user started toward you, an answer relayed to something you asked, a handoff \u2014 each with its durable Entries, accepted decisions and open decision needs, in the same shape a contact read returns. A pure read with no arguments: nothing is consumed, acknowledged or claimed by reading it, so call it on startup, after a long wait, or whenever you want to know what is outstanding. To act on one, claim its Goal (claim_goal) or reread it with contact({deliveryId}). Your runnable and review-pending Goals come from claim_goal, not from here.";
+    CheckRepliesSchema = external_exports.object({}).strict();
+    GetThreadSchema = external_exports.object({
+      parentId: external_exports.string().describe("The Thread to read \u2014 the threadId a Delivery returned, or the parentId of a search hit.")
+    }).strict();
+    GET_THREAD_DESCRIPTION = "Read the authorized durable Entries on one conversation Thread \u2014 what you wrote there and what was delivered to you, oldest first. Use claim_goal to find the work to resume; use this to rehydrate a Thread that a search hit or a Delivery named.";
+    SearchThreadsSchema = external_exports.object({
+      q: external_exports.string().describe("What to look for \u2014 plain words or a phrase (e.g. 'the livekit timeout', 'deploy to prod').")
+    }).strict();
+    SEARCH_THREADS_DESCRIPTION = `Search your PAST conversations before asking \u2014 "have we discussed this before?". Full-text over your own threads (the asks you sent + the user's answers); returns ranked threads with highlighted snippets, NOT rows: { hits: [{ parentId, at, agentLabel, matches: [{ notificationId, role, snippet }] }] }. The loop this exists for: search first \u2192 get_thread the best hit to rehydrate it \u2192 THEN continue or contact, so you answer with receipts ("last week you said ship it") instead of re-asking. Read-only, safe to call anytime; scoped to your own account's threads.`;
+    AGENT_TOOLS = [
+      { name: "contact", description: CONTACT_DESCRIPTION, inputSchema: CONTACT_SCHEMA },
+      { name: "check_replies", description: CHECK_REPLIES_DESCRIPTION, inputSchema: mcpInputSchema(CheckRepliesSchema) },
+      { name: "get_thread", description: GET_THREAD_DESCRIPTION, inputSchema: mcpInputSchema(GetThreadSchema) },
+      { name: "search_threads", description: SEARCH_THREADS_DESCRIPTION, inputSchema: mcpInputSchema(SearchThreadsSchema) },
+      { name: "create_goal", description: CREATE_GOAL_DESCRIPTION, inputSchema: mcpInputSchema(CreateGoalToolSchema) },
+      { name: "claim_goal", description: CLAIM_GOAL_DESCRIPTION, inputSchema: mcpInputSchema(ClaimGoalSchema) },
+      { name: "get_goal", description: GET_GOAL_DESCRIPTION, inputSchema: mcpInputSchema(GetGoalSchema) },
+      { name: "update_goal", description: UPDATE_GOAL_DESCRIPTION, inputSchema: mcpInputSchema(UpdateGoalToolSchema) }
+    ];
+    AGENT_TOOL_NAMES = AGENT_TOOLS.map((t) => t.name);
     ContextSchema = external_exports.object({
       title: external_exports.string().min(1).describe("One-line headline of what you need (required, non-empty)."),
       description: external_exports.array(external_exports.string().min(1)).describe(
@@ -27285,16 +27027,6 @@ var init_dist = __esm({
     });
     NotifyStatusSchema = external_exports.enum(["pending", "answered", "ignored"]);
     AgentStateSchema = external_exports.enum(["idle", "in_progress", "completed", "needs_input"]);
-    SetTaskStateSchema = external_exports.object({
-      state: external_exports.enum(["in_progress", "completed", "needs_input"])
-    });
-    SetWorkStateSchema = external_exports.object({
-      workId: external_exports.string().uuid().optional(),
-      notificationId: external_exports.string().optional(),
-      state: SetTaskStateSchema.shape.state
-    }).refine((value) => Number(Boolean(value.workId)) + Number(Boolean(value.notificationId)) === 1, {
-      message: "exactly one of workId or notificationId is required"
-    });
     TurnSchema = external_exports.object({
       prompt: external_exports.string(),
       reply: external_exports.string()
@@ -27424,108 +27156,6 @@ var init_dist = __esm({
       })
     ]);
     CallbackTriggerSchema = external_exports.enum(["on_done", "on_blocked", "scheduled"]);
-    ScheduleCallbackSchema = external_exports.object({
-      parentId: external_exports.string().describe("The thread to call back on (from a prior contact / reply / request)."),
-      goalId: external_exports.string().uuid().optional().describe("The Goal this callback advances; preferred for Goal-owned work."),
-      trigger: CallbackTriggerSchema,
-      dueInSeconds: external_exports.number().int().positive().optional().describe("For 'scheduled' only: how many seconds from now to fire."),
-      note: external_exports.string().optional().describe("What to tell the user when you follow up.")
-    });
-    PendingRepliesSchema = external_exports.object({
-      replies: external_exports.array(
-        external_exports.object({
-          parentId: external_exports.string(),
-          notificationId: external_exports.string(),
-          workId: external_exports.string().uuid().optional(),
-          decisionId: external_exports.string().uuid().optional(),
-          answer: UserAnswerSchema,
-          /** E2EE: the sealed answer (opaque envelope + plaintext `ignored` hint) when the
-           *  pairing is E2EE — the agent opens it and re-derives the real answer. Absent =
-           *  plaintext answer (in `answer`). See AwaitItemSchema's reply variant. */
-          sealed: external_exports.lazy(() => SealedAnswerSchema).optional(),
-          /** The call record rendered for THIS agent: the raw words the shaped answer was
-           *  mapped from, filtered to its own claims. See AwaitItemSchema's reply variant. */
-          transcript: external_exports.string().optional(),
-          /** Coverage report (#396): which declared `points` this answer addressed. */
-          covered: external_exports.array(external_exports.string()).optional()
-        })
-      ),
-      pending: external_exports.array(
-        external_exports.object({ parentId: external_exports.string(), notificationId: external_exports.string(), createdAt: external_exports.string() })
-      ),
-      /** WHO YOU ARE on this account (field report 2026-08-28): the name and device the user
-       *  sees for this session's identity. From inside a session there was no way to find out —
-       *  `pair` with no arguments can HATCH a fresh identity, so it is not a safe probe — and an
-       *  agent that cannot tell which agent it is cannot tell whether work addressed to
-       *  "Reta" was addressed to it. Absent only for a token with no pairing behind it. */
-      you: external_exports.object({ name: external_exports.string(), device: external_exports.string().nullable(), tokenId: external_exports.string() }).optional(),
-      /** User-initiated requests addressed to this agent; act on them and reply via
-       *  contact on the same parentId. Keeps reappearing until you call
-       *  set_work_state on its workId (or notificationId once while bootstrapping). */
-      requests: external_exports.array(
-        external_exports.object({
-          parentId: external_exports.string(),
-          notificationId: external_exports.string(),
-          workId: external_exports.string().uuid().optional(),
-          text: external_exports.string(),
-          createdAt: external_exports.string(),
-          /** The user seeded this request with a past conversation — call get_thread on it
-           *  FIRST and treat the transcript as prior context (#57/#251). */
-          contextParentId: external_exports.string().optional(),
-          /** STRANDED (field report 2026-08-28): this request was addressed to ANOTHER agent on
-           *  the account — the name here — which has not been seen since it landed, so nobody
-           *  came for it. Handed to you because you are the session that is here. Take it like
-           *  any request (set_work_state claims it, reply with contact on its parentId), and say
-           *  whose it was, because the user chose that agent on purpose. */
-          stranded: external_exports.string().optional()
-        })
-      ),
-      /** Durable outcomes currently owned by this agent. This is the Work-native queue; flat
-       * notification lists remain during migration so old clients keep their existing view. */
-      work: external_exports.array(external_exports.object({
-        workId: external_exports.string().uuid(),
-        parentId: external_exports.string().optional(),
-        objective: external_exports.string().nullable(),
-        state: external_exports.enum(["active", "blocked", "waiting_external"]),
-        blockedOn: external_exports.array(external_exports.string().uuid()),
-        updatedAt: external_exports.string()
-      })).optional(),
-      /** Callbacks you owe the user that are now DUE (you said you'd follow up when done,
-       *  if blocked, or at a time that has passed). Re-surfaced every sweep until you
-       *  fulfill one by calling contact on its parentId. */
-      /** Ride-alongs (RideAlongSchema): notes assigned to this agent that no wake could
-       *  reach. Same array the contact/await replies carry — one queue, every carrier. */
-      also: external_exports.array(RideAlongSchema).optional(),
-      owedCallbacks: external_exports.array(
-        external_exports.object({ parentId: external_exports.string(), trigger: CallbackTriggerSchema, note: external_exports.string() })
-      ),
-      /** Work (either direction) you reported in_progress a while ago and never reported
-       *  completed — likely left half-done by this session or a prior one that crashed or
-       *  went idle. Report a real state (set_work_state) or continue the work. */
-      stalled: external_exports.array(
-        external_exports.object({ parentId: external_exports.string(), notificationId: external_exports.string(), title: external_exports.string().nullable(), startedAt: external_exports.string() })
-      ),
-      /** The queue rail (#614, pending/design.md): the same replies + requests, grouped by
-       *  thread and ordered oldest-thread-first, so you work ONE thread at a time — fold all of
-       *  a thread's `items` into a single turn rather than interleaving threads. `busy` = the
-       *  thread already has a turn in progress (younger than the stall cutoff); let it finish and
-       *  ride the next turn. `items` are that thread's replies/requests in arrival order; the
-       *  full payload for each is in the flat `replies`/`requests` arrays (matched by
-       *  notificationId). Derived, never stored — a crashed agent recomputes it exactly. */
-      threads: external_exports.array(
-        external_exports.object({
-          parentId: external_exports.string(),
-          busy: external_exports.boolean(),
-          items: external_exports.array(
-            external_exports.object({
-              kind: external_exports.enum(["reply", "request"]),
-              notificationId: external_exports.string(),
-              at: external_exports.string()
-            })
-          )
-        })
-      )
-    });
     NotifyResponseSchema = external_exports.object({
       notificationId: external_exports.string(),
       workId: external_exports.string().uuid().optional(),
@@ -27588,6 +27218,13 @@ var init_dist = __esm({
     });
     VoiceKeySchema = external_exports.enum(["rachel", "george", "jessica", "brian", "lily"]);
     AgendaTurnSchema = external_exports.object({
+      /** THE TURN'S IDENTITY (the first-sentence stream, 2026-09-09): the brain call that wrote
+       *  it and its place in that reply — `<brainCallId>:<index>`, with `:p` on the first
+       *  sentence a re-plan publishes ahead of the rest. A turn is spoken once, by this id: the
+       *  completion of a streamed re-plan carries the published sentence again, and the walk
+       *  drops what it already said by identity, never by the API's guess of what was polled.
+       *  Absent on plans nothing streams (a ring plan, a floor). */
+      id: external_exports.string().optional(),
       /** Twin coverage (#1089): sibling claim ids this asking turn's answer ALSO settles —
        *  the planner declares duplicates instead of asking them twice. */
       coveredIds: external_exports.array(external_exports.string()).optional(),
@@ -27746,7 +27383,21 @@ var init_dist = __esm({
       /** E2EE: the agent's device X25519 public key to seal the user's answer BACK to (the
        *  sender the phone replies to). Sourced server-side from this item's pairing credential.
        *  Present only alongside `envelope`; the phone seals via sealAnswer(answer, this, id). */
-      agentX25519: external_exports.string().optional()
+      agentX25519: external_exports.string().optional(),
+      /** THE TARGET FACTS A CARD RENDERS (#1796 point 5, 2026-09-11): the Delivery it is a view of,
+       *  that Delivery's kind, the request Entry, the Goals it answers for, the exact DecisionNeed (none
+       *  for a request that asks nothing), whether its content is sealed, and that Goal's state. The
+       *  answer writer (`POST /api/entries`) and the disposition (`close_delivery`) take their ids from
+       *  here. The server projects it (`apps/api/src/inbox/project.ts`); a client never builds it. */
+      communication: external_exports.object({
+        deliveryId: external_exports.string(),
+        kind: external_exports.enum(["notification", "call"]),
+        entryId: external_exports.string(),
+        goalIds: external_exports.array(external_exports.string()),
+        decisionNeedId: external_exports.string().optional(),
+        sealed: external_exports.boolean(),
+        goalState: external_exports.string().optional()
+      }).optional()
     });
     SnoozeRequestSchema = external_exports.object({
       requestId: external_exports.string(),
@@ -27982,26 +27633,54 @@ var init_dist = __esm({
        *  the agent reads it via get_thread. Must belong to the requesting user. */
       contextParentId: external_exports.string().optional()
     });
-    HandoffSchema = external_exports.object({
-      /** Move this existing outcome to `target` without reminting it. Requires `target`. */
-      workId: external_exports.string().uuid().optional(),
-      /** Land the note on an existing thread; omitted mints a fresh one. */
-      parentId: external_exports.string().uuid().optional(),
-      /** One-line headline of the working context handed off. */
-      title: external_exports.string().min(1),
-      /** The brief — standalone notes the successor reads (what was done, what's left, links). */
-      notes: external_exports.array(external_exports.string().min(1)).min(1),
-      /** A sibling connection to dispatch directly to (token id or agent nickname). Same-account
-       *  only; omit to leave the thread for the user to hand off in the app. */
-      target: external_exports.string().optional(),
-      /** Write the note as a RECAP (kind:'recap', #617): a summary turn that supersedes the
-       *  thread's earlier turns for rehydration — get_thread returns the latest recap + only
-       *  the turns after it. Handoff-to-a-successor and handoff-to-yourself-later are the
-       *  same primitive; a recap is one whose audience includes you. */
-      recap: external_exports.boolean().optional()
-    }).refine((value) => !value.workId || Boolean(value.target), {
-      message: "target is required when handing off Work",
-      path: ["target"]
+    QueueQuestionSchema = external_exports.object({
+      /** The decision need's id — what an answer is accepted against. */
+      id: external_exports.string(),
+      /** The words that were asked, from the request Entry that asked them. */
+      question: external_exports.string(),
+      /** Where it was asked — which is where the ruling goes (`POST /api/entries`). Null only
+       *  for a need whose request Entry is carried by no interactive Delivery, which nothing
+       *  can answer. */
+      deliveryId: external_exports.string().nullable().default(null),
+      /** The Entry the ruling is about. */
+      aboutId: external_exports.string().nullable().default(null),
+      /** Empty for a free-text question. */
+      options: external_exports.array(OptionSchema).default([]),
+      select: external_exports.enum(["one", "many", "rank", "confirm", "text"]).default("text"),
+      askedAt: external_exports.string(),
+      /** Null while the question is open — which is how the page tells the two apart. */
+      answeredAt: external_exports.string().nullable().default(null),
+      /** The ruling in the person's own words, from the contribution that replied — not the
+       *  option id, which is not something anyone reads back. Null while it is open, and null
+       *  for a settled question whose reply carried nothing readable. */
+      answer: external_exports.string().nullable().default(null)
+    });
+    QueueItemSchema = external_exports.object({
+      id: external_exports.string(),
+      /** One-line headline — the first sentence of the outcome. */
+      title: external_exports.string(),
+      /** The outcome in full, verbatim: the person's own words are what an assignee sees. */
+      intent: external_exports.string(),
+      /** `ready` | `active` | `waiting` | `done` | `cancelled`, straight off the Goal. */
+      state: external_exports.string(),
+      /** Who holds it (a participant ref); null when nobody does yet. */
+      assignee: external_exports.string().nullable().default(null),
+      /** What the agent last said it was doing; null if it has said nothing. */
+      progress: external_exports.string().nullable().default(null),
+      reviewPending: external_exports.boolean().default(false),
+      dueAt: external_exports.string().nullable().default(null),
+      /** The Goal this one was opened under; null at the root. */
+      parentGoalId: external_exports.string().nullable().default(null),
+      /** Goals opened under this one — only those the same list holds. */
+      childGoalIds: external_exports.array(external_exports.string()).default([]),
+      /** Goals this one waits on (start or finish gates). */
+      dependencyGoalIds: external_exports.array(external_exports.string()).default([]),
+      /** True while any gate is on a Goal that is not done — the walk draws it dashed. */
+      blocked: external_exports.boolean().default(false),
+      /** Every decision need on it, open or settled — the page decides which to show. */
+      questions: external_exports.array(QueueQuestionSchema).default([]),
+      createdAt: external_exports.string(),
+      updatedAt: external_exports.string().nullable().default(null)
     });
     NoteSourceSchema = external_exports.enum(["app", "call"]);
     NoteStatusSchema = external_exports.enum(["open", "assigned", "in_progress", "done"]);
@@ -28130,6 +27809,8 @@ var init_dist = __esm({
       failed: external_exports.array(external_exports.object({ noteId: external_exports.string(), reason: external_exports.string() }))
     });
     DeliveryModeSchema = external_exports.enum(["poll", "self_hosted"]);
+    WAKE_EVENT = "wake";
+    wakeChannel = (tokenId) => `wake:${tokenId}`;
     RegisterDeliverySchema = external_exports.object({ mode: DeliveryModeSchema });
     OAuthStartSchema = external_exports.object({
       provider: external_exports.enum(["cma"]),
@@ -28138,15 +27819,29 @@ var init_dist = __esm({
     DeliveryConfigSchema = external_exports.object({
       tokenId: external_exports.string(),
       mode: DeliveryModeSchema,
-      /** null when the server has no SUPABASE_ANON_KEY set — the listener then falls
-       *  back to its own PAIGY_SUPABASE_URL / PAIGY_SUPABASE_ANON_KEY env. */
+      /** null when the deployment has no anon key configured. `self_hosted` is then REFUSED
+       *  (503 `self_hosted_unavailable`) rather than registered, so a self_hosted config always
+       *  carries credentials; only a `poll` registration can come back with null here. */
       realtime: external_exports.object({ url: external_exports.string(), anonKey: external_exports.string() }).nullable()
     });
     StatusSchema = external_exports.object({
       name: external_exports.string(),
       sessionMode: external_exports.enum(["default", "all_calls", "silent"]),
       /** A phone is registered for push/ring (any push token on the account). */
-      phone: external_exports.boolean()
+      phone: external_exports.boolean(),
+      /** HOW MANY THINGS ARE WAITING ON THIS IDENTITY — replies it never collected and requests
+       *  it never picked up. THE SAME NUMBER the harness's wake gate reads
+       *  (`pendingSummary.unacknowledged`), from the same function, because a statusline saying
+       *  zero while the sweep sees one is two ideas of "waiting".
+       *
+       *  Why it is here at all (owner, 2026-09-07): nothing can interrupt an idle agent process
+       *  that nobody spawned, so a terminal session only learns of work by asking. The harness
+       *  used to paper over that by spawning a SECOND process on the identity; now it stands
+       *  back, correctly, and the person sitting at the terminal is the one who can act. A
+       *  coffee-beans request sat unread for three days.
+       *
+       *  Optional: an older API sends no field, and the statusline then renders exactly as before. */
+      waiting: external_exports.number().int().nonnegative().optional()
     });
     EnvelopeRecipientSchema = external_exports.object({
       keyId: external_exports.string(),
@@ -28312,24 +28007,11 @@ var init_dist = __esm({
       message: external_exports.string(),
       childIds: external_exports.array(external_exports.string()).optional()
     });
-    CONTACT_SCHEMA = contactSchemaFrom({
-      ask: NotifyRequestFields.shape.ask,
-      waiting: NotifyRequestFields.shape.waiting,
-      options: NotifyRequestFields.shape.options,
-      channel: NotifyRequestFields.shape.channel,
-      parentId: NotifyRequestFields.shape.parentId,
-      workId: NotifyRequestFields.shape.workId,
-      goalId: NotifyRequestFields.shape.goalId
-    });
     import_tweetnacl = __toESM2(require_nacl_fast(), 1);
     import_tweetnacl2 = __toESM2(require_nacl_fast(), 1);
     import_tweetnacl3 = __toESM2(require_nacl_fast(), 1);
     import_tweetnacl4 = __toESM2(require_nacl_fast(), 1);
     import_tweetnacl5 = __toESM2(require_nacl_fast(), 1);
-    B64 = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
-    ok = false;
-    ENVELOPE_VERSION = 1;
-    ENVELOPE_ALG = "x25519-xsalsa20poly1305";
     AGENT_NAME = process.env.PAIGY_AGENT || sessionSlot();
     TOKEN_PATH = join2(homedir2(), ".paigy", "token.json");
     KEY_PATH = join2(homedir2(), ".paigy", "key.json");
@@ -28340,25 +28022,28 @@ var init_dist = __esm({
         this.name = "UnpairedError";
       }
     };
-    tokenOverride = null;
-    authToken = (explicit) => explicit ?? tokenOverride ?? readToken();
-    sleep3 = (ms) => new Promise((resolve3) => setTimeout(resolve3, ms));
-    ReplyLeaseExpiredError = class extends Error {
-      constructor() {
-        super(
-          "The Paigy reply lease expired before acknowledgement. The answer remains durable; wait on it again (contact with only { wait: notificationId }) to reclaim it before acting."
-        );
-        this.name = "ReplyLeaseExpiredError";
-      }
-    };
-    ReplyAckError = class extends Error {
-      constructor(message, retryable) {
-        super(message);
-        this.retryable = retryable;
-        this.name = "ReplyAckError";
+    ApiError = class extends Error {
+      status;
+      body;
+      constructor(what, status, text) {
+        super(`${what} failed: ${status} ${text}`);
+        this.name = "ApiError";
+        this.status = status;
+        let body = void 0;
+        try {
+          body = JSON.parse(text);
+        } catch {
+        }
+        this.body = body;
       }
-      retryable;
     };
+    AWAIT_WINDOW_MS = 45e3;
+    tokenOverride = null;
+    authToken = (explicit) => explicit ?? tokenOverride ?? readToken();
+    HEARTBEAT_MS = 25e3;
+    RETRY_MS = [1e3, 2e3, 5e3, 1e4, 3e4];
+    JOIN = { config: { broadcast: { self: false } } };
+    lines = /* @__PURE__ */ new Map();
   }
 });
 
@@ -29661,11 +29346,11 @@ var require_dijkstra = __commonJS({
         var predecessors = {};
         var costs = {};
         costs[s] = 0;
-        var open2 = dijkstra.PriorityQueue.make();
-        open2.push(s, 0);
+        var open = dijkstra.PriorityQueue.make();
+        open.push(s, 0);
         var closest, u, v, cost_of_s_to_u, adjacent_nodes, cost_of_e, cost_of_s_to_u_plus_cost_of_e, cost_of_s_to_v, first_visit;
-        while (!open2.empty()) {
-          closest = open2.pop();
+        while (!open.empty()) {
+          closest = open.pop();
           u = closest.value;
           cost_of_s_to_u = closest.cost;
           adjacent_nodes = graph[u] || {};
@@ -29677,7 +29362,7 @@ var require_dijkstra = __commonJS({
               first_visit = typeof costs[v] === "undefined";
               if (first_visit || cost_of_s_to_v > cost_of_s_to_u_plus_cost_of_e) {
                 costs[v] = cost_of_s_to_u_plus_cost_of_e;
-                open2.push(v, cost_of_s_to_u_plus_cost_of_e);
+                open.push(v, cost_of_s_to_u_plus_cost_of_e);
                 predecessors[v] = u;
               }
             }
@@ -32969,17 +32654,17 @@ async function available(deps = {}) {
   return [ollama, ...harnesses];
 }
 function refusal(options, asked) {
-  const lines = [
+  const lines2 = [
     asked ? `Can't judge with --via ${asked}: ${options.find((o) => o.provider === asked)?.hint ?? "it isn't available on this machine"}` : "No local judge available \u2014 triage refuses rather than sending your queue to a cloud model.",
     "",
     "Triage runs the model where your queue already lives (#1106). Your options:"
   ];
   for (const o of options) {
-    lines.push(`  ${o.ready ? "\u2713" : "\u2717"} ${o.provider.padEnd(7)} ${PRIVACY[o.provider]}`);
-    if (!o.ready && o.hint) lines.push(`      ${o.hint}`);
+    lines2.push(`  ${o.ready ? "\u2713" : "\u2717"} ${o.provider.padEnd(7)} ${PRIVACY[o.provider]}`);
+    if (!o.ready && o.hint) lines2.push(`      ${o.hint}`);
   }
-  lines.push("", "Then re-run:  paigy-harness triage [--via ollama|claude|codex|agy]");
-  return lines.join("\n");
+  lines2.push("", "Then re-run:  paigy-harness triage [--via ollama|claude|codex|agy]");
+  return lines2.join("\n");
 }
 async function judgeFor(asked, deps = {}) {
   const options = await available(deps);
@@ -33128,8 +32813,8 @@ function agentSignals(notes, connections, now) {
 }
 function noteSignals(notes, connections, now) {
   const nameOf = new Map(connections.map((c) => [c.id, c.name]));
-  const open2 = notes.filter((n) => OPEN_STATUSES.includes(n.status));
-  return open2.map((n) => {
+  const open = notes.filter((n) => OPEN_STATUSES.includes(n.status));
+  return open.map((n) => {
     const superseded = supersededBy(n, notes);
     const echo = doneEcho(n, notes);
     const token = assigneeToken(n);
@@ -33377,27 +33062,27 @@ function suggested(run) {
   return run.close.length + run.stale.length + run.assign.reduce((n, a) => n + a.notes.length, 0);
 }
 function renderTable(run) {
-  const lines = [];
+  const lines2 = [];
   const width = Math.max(
     24,
     ...[...run.close, ...run.stale, ...run.assign.flatMap((a) => a.notes)].map((n) => Math.min(n.title.length, 48))
   );
   const row = (n) => `    ${n.title.slice(0, width).padEnd(width)}  ${n.why}`;
   if (run.close.length) {
-    lines.push(`Paigy thinks you should CLOSE ${plural(run.close.length, "note")}:`);
-    lines.push(...run.close.map(row), "");
+    lines2.push(`Paigy thinks you should CLOSE ${plural(run.close.length, "note")}:`);
+    lines2.push(...run.close.map(row), "");
   }
   if (run.stale.length) {
-    lines.push(`Paigy thinks ${plural(run.stale.length, "note")} ${run.stale.length === 1 ? "has" : "have"} gone STALE:`);
-    lines.push(...run.stale.map(row), "");
+    lines2.push(`Paigy thinks ${plural(run.stale.length, "note")} ${run.stale.length === 1 ? "has" : "have"} gone STALE:`);
+    lines2.push(...run.stale.map(row), "");
   }
   for (const group of run.assign) {
-    lines.push(`Paigy thinks you should ASSIGN ${plural(group.notes.length, "note")} to ${group.agentName}:`);
-    lines.push(...group.notes.map(row), "");
+    lines2.push(`Paigy thinks you should ASSIGN ${plural(group.notes.length, "note")} to ${group.agentName}:`);
+    lines2.push(...group.notes.map(row), "");
   }
   const acted = suggested(run);
-  lines.push(`Reviewed ${plural(run.reviewed, "open note")} \xB7 ${plural(acted, "suggestion")} \xB7 ${run.reviewed - acted} left alone`);
-  return lines.join("\n");
+  lines2.push(`Reviewed ${plural(run.reviewed, "open note")} \xB7 ${plural(acted, "suggestion")} \xB7 ${run.reviewed - acted} left alone`);
+  return lines2.join("\n");
 }
 async function confirm(question) {
   if (!process.stdin.isTTY) return false;
@@ -33595,8 +33280,301 @@ import { execSync } from "child_process";
 import { homedir as homedir7 } from "os";
 import { join as join5 } from "path";
 
-// src/paigy/bridge.ts
-init_dist();
+// src/harness/session.ts
+import { spawn } from "child_process";
+import { existsSync as existsSync3 } from "fs";
+import { homedir as homedir3 } from "os";
+import { resolve, delimiter as delimiter2 } from "path";
+
+// src/harness/acp.ts
+var none = { events: [], writes: [] };
+function optionFor(options, decision) {
+  const want = decision.allow ? "allow_once" : "reject_once";
+  return options.find((o) => o.kind === want)?.optionId ?? null;
+}
+function createAcpDriver(opts) {
+  return new AcpDriver(opts.cwd, opts.mode);
+}
+var AcpDriver = class {
+  constructor(cwd, mode) {
+    this.cwd = cwd;
+    this.mode = mode;
+  }
+  cwd;
+  mode;
+  nextId = 1;
+  initId;
+  sessionNewId;
+  promptId;
+  sessionId;
+  queued = [];
+  /** Options of each unanswered permission request, keyed by its JSON-RPC id. */
+  pending = /* @__PURE__ */ new Map();
+  /** Where the REPORT starts in `text` — everything before the LAST tool call is working
+   *  narration ("Now the API endpoints." → runs a tool), and it used to ship: the chunks
+   *  concatenate with no separator, so the owner's phone got "…find the repo.Now I have
+   *  the full picture. Writing the migration.Now…" as the opening paragraph of a finished
+   *  task (live, 2026-08-11 — "looks like a working log"). The narration's audience is the
+   *  terminal and host.log; what the agent composed AFTER its last tool call is the part
+   *  addressed to a human, and that is what leaves the machine. */
+  reportFrom = 0;
+  /** The turn being streamed: text accumulates, tools append, both flush on stopReason. */
+  text = "";
+  tools = [];
+  /** The opening frame. Everything after is driven by responses in `handleLine`. */
+  open() {
+    this.initId = this.nextId++;
+    return [
+      frame2({
+        id: this.initId,
+        method: "initialize",
+        params: {
+          protocolVersion: 2,
+          // We are not an editor: no file services offered, the agent uses its own.
+          clientCapabilities: { fs: { readTextFile: false, writeTextFile: false } },
+          clientInfo: { name: "paigy-desktop", version: "0.0.0" }
+        }
+      })
+    ];
+  }
+  /** Queue a prompt; it goes out when the session exists and no turn is running. */
+  send(text) {
+    this.queued.push(text);
+    return this.flush();
+  }
+  /** Answer a PermissionEvent (ask mode). The id is the request's JSON-RPC id as a string. */
+  respond(id, decision) {
+    const request = this.pending.get(id);
+    if (!request) return [];
+    this.pending.delete(id);
+    const optionId = optionFor(request.options, decision);
+    return [
+      optionId ? frame2({ id: request.id, result: { outcome: { outcome: "selected", optionId } } }) : frame2({ id: request.id, result: { outcome: { outcome: "cancelled" } } })
+    ];
+  }
+  /** Cancel anything still blocked — called on stop so the process can exit cleanly. */
+  close() {
+    const writes = [...this.pending.values()].map(
+      (r) => frame2({ id: r.id, result: { outcome: { outcome: "cancelled" } } })
+    );
+    this.pending.clear();
+    return writes;
+  }
+  handleLine(line) {
+    const trimmed = line.trim();
+    if (!trimmed) return none;
+    let msg;
+    try {
+      msg = JSON.parse(trimmed);
+    } catch {
+      return none;
+    }
+    if (msg.method !== void 0) {
+      return msg.id !== void 0 ? this.handleRequest(msg) : this.handleNotification(msg);
+    }
+    if (msg.id !== void 0) return this.handleResponse(msg);
+    return none;
+  }
+  // ── responses to our requests ──
+  handleResponse(msg) {
+    if (msg.id === this.initId) {
+      this.initId = void 0;
+      if (msg.error) {
+        return { events: [{ kind: "error", message: `initialize failed: ${msg.error.message}` }], writes: [] };
+      }
+      this.sessionNewId = this.nextId++;
+      return {
+        events: [],
+        writes: [frame2({ id: this.sessionNewId, method: "session/new", params: { cwd: this.cwd, mcpServers: [] } })]
+      };
+    }
+    if (msg.id === this.sessionNewId) {
+      this.sessionNewId = void 0;
+      const sessionId2 = msg.result?.sessionId;
+      if (!sessionId2) {
+        return {
+          events: [{ kind: "error", message: `session/new failed: ${msg.error?.message ?? "no sessionId"}` }],
+          writes: []
+        };
+      }
+      this.sessionId = sessionId2;
+      const value = this.mode === "bypass" ? "bypassPermissions" : "default";
+      const writes = [
+        frame2({
+          id: this.nextId++,
+          method: "session/set_config_option",
+          params: { sessionId: sessionId2, configId: "mode", value }
+        }),
+        frame2({ id: this.nextId++, method: "session/set_mode", params: { sessionId: sessionId2, modeId: value } })
+      ];
+      writes.push(...this.flush());
+      return { events: [], writes };
+    }
+    if (msg.id === this.promptId) {
+      this.promptId = void 0;
+      const events = [];
+      const report = this.text.slice(this.reportFrom).trim() || this.text.trim();
+      if (report || this.tools.length) {
+        events.push({
+          kind: "turn",
+          role: "agent",
+          text: report,
+          ...this.tools.length ? { tools: [...this.tools] } : {}
+        });
+      }
+      const result = report;
+      const failed = msg.error !== void 0 || msg.result?.stopReason === "refusal";
+      this.text = "";
+      this.tools = [];
+      this.reportFrom = 0;
+      const writes = this.flush();
+      if (!writes.length) {
+        events.push({
+          kind: "idle",
+          ...result ? { result } : {},
+          ...failed ? { failed: true } : {}
+        });
+      }
+      return { events, writes };
+    }
+    return none;
+  }
+  // ── the agent talking to us ──
+  handleNotification(msg) {
+    if (msg.method !== "session/update") return none;
+    const update = msg.params?.update;
+    switch (update?.sessionUpdate) {
+      case "agent_message_chunk":
+        this.text += update.content?.text ?? "";
+        return none;
+      case "tool_call": {
+        const title = update.title?.trim() || update.kind || "tool";
+        this.tools.push(title);
+        const note = this.text.slice(this.reportFrom).trim();
+        this.reportFrom = this.text.length;
+        return { events: [{ kind: "work", tool: title, ...note ? { note } : {} }], writes: [] };
+      }
+      default:
+        return none;
+    }
+  }
+  handleRequest(msg) {
+    if (msg.method !== "session/request_permission") {
+      return {
+        events: [],
+        writes: [frame2({ id: msg.id, error: { code: -32601, message: `Method not found: ${msg.method}` } })]
+      };
+    }
+    const id = msg.id;
+    const options = msg.params?.options ?? [];
+    const title = msg.params?.toolCall?.title?.trim() || "a tool call";
+    const tool = msg.params?.toolCall?.kind ?? "tool";
+    if (this.mode === "bypass") {
+      const optionId = optionFor(options, { allow: true }) ?? optionFor(options, { allow: false });
+      return {
+        // The decision still goes through Paigy — as history, not a question. Bypass
+        // means "don't stall the agent", never "don't tell the user".
+        events: [{ kind: "turn", role: "agent", text: `auto-approved: ${title}`, tools: [tool] }],
+        writes: [
+          optionId ? frame2({ id, result: { outcome: { outcome: "selected", optionId } } }) : frame2({ id, result: { outcome: { outcome: "cancelled" } } })
+        ]
+      };
+    }
+    this.pending.set(String(id), { id, options });
+    return {
+      events: [{ kind: "permission", id: String(id), tool, summary: title }],
+      writes: []
+    };
+  }
+  /** Send the queued prompts as one turn, if the agent can take one right now. */
+  flush() {
+    if (!this.sessionId || this.promptId !== void 0 || !this.queued.length) return [];
+    const blocks = this.queued.map((text) => ({ type: "text", text }));
+    this.queued = [];
+    this.promptId = this.nextId++;
+    return [
+      frame2({
+        id: this.promptId,
+        method: "session/prompt",
+        params: { sessionId: this.sessionId, prompt: blocks }
+      })
+    ];
+  }
+};
+var frame2 = (body) => JSON.stringify({ jsonrpc: "2.0", ...body });
+
+// src/harness/session.ts
+init_catalog();
+var ADAPTER_BIN = {
+  claude: "claude-agent-acp",
+  codex: "codex-acp",
+  agy: "agy"
+};
+function splitLines(buffer, chunk) {
+  const combined = buffer + chunk;
+  const parts = combined.split("\n");
+  const rest = parts.pop() ?? "";
+  return { lines: parts.filter((l) => l.trim()), rest };
+}
+function startSession(opts) {
+  const cwd = resolve(opts.cwd.replace(/^~(?=$|\/)/, homedir3()));
+  if (!existsSync3(cwd)) {
+    queueMicrotask(() => opts.onEvent({ kind: "error", message: `workspace does not exist: ${cwd}` }));
+  }
+  const child = (opts.spawnFn ?? spawn)(opts.bin ?? ADAPTER_BIN[opts.harness], [], {
+    cwd,
+    // The adapter shells out to its vendor CLI (`claude`, `codex`), and a GUI- or
+    // launchd-launched process's PATH won't have it — probe dirs plus the RUNNING
+    // node's own bin dir (nvm installs the adapters next to node; launchd's bare
+    // PATH knows neither — live catch 2026-08-04: the first slot-wake ENOENT'd).
+    env: {
+      ...process.env,
+      PATH: [process.env.PATH, ...probeDirs()].filter(Boolean).join(delimiter2),
+      ...opts.token ? { PAIGY_TOKEN: opts.token } : {}
+    },
+    stdio: ["pipe", "pipe", "pipe"]
+  });
+  const write = (frames) => {
+    for (const f of frames) child.stdin?.write(`${f}
+`);
+  };
+  child.stderr?.on("data", (chunk) => {
+    const text = String(chunk).trim();
+    if (text) opts.onEvent({ kind: "error", message: text });
+  });
+  child.on("exit", (code) => {
+    opts.onEvent({ kind: "idle", failed: code !== 0, ...code ? { result: `exited ${code}` } : {} });
+    opts.onExit?.();
+  });
+  child.on("error", (e) => {
+    opts.onEvent({ kind: "error", message: e.message });
+    opts.onExit?.();
+  });
+  const driver = createAcpDriver({ cwd, mode: opts.mode });
+  let buffer = "";
+  child.stdout?.on("data", (chunk) => {
+    const { lines: lines2, rest } = splitLines(buffer, String(chunk));
+    buffer = rest;
+    for (const line of lines2) {
+      const { events, writes } = driver.handleLine(line);
+      write(writes);
+      for (const event of events) opts.onEvent(event);
+    }
+  });
+  write(driver.open());
+  return {
+    send(text) {
+      write(driver.send(text));
+    },
+    respond(id, decision) {
+      write(driver.respond(id, decision));
+    },
+    stop() {
+      write(driver.close());
+      child.kill();
+    }
+  };
+}
 
 // ../../packages/schema/dist/index.js
 init_zod();
@@ -34894,22 +34872,20 @@ var zodToJsonSchema2 = (schema, options) => {
 };
 
 // ../../packages/schema/dist/index.js
+init_zod();
 var OPTIONS_MIN2 = 2;
 var OPTIONS_MAX2 = 6;
-var MISSED_CALL_PLAN2 = {
-  retry_10m: { kind: "every", minutes: 10 },
-  retry_30m: { kind: "every", minutes: 30 },
-  retry_60m: { kind: "every", minutes: 60 },
-  backoff_gentle: { kind: "at", minutes: [30, 120, 360] },
-  backoff_standard: { kind: "at", minutes: [10, 30, 120] },
-  backoff_aggressive: { kind: "at", minutes: [5, 15, 45] },
-  inbox: { kind: "once" },
-  dismiss: { kind: "grace", minutes: 2 }
-};
 function draft20202(node) {
   if (Array.isArray(node)) return node.map(draft20202);
   if (node && typeof node === "object") {
     const o = node;
+    if (Array.isArray(o.items)) {
+      o.prefixItems = o.items;
+      if ("additionalItems" in o) {
+        o.items = o.additionalItems;
+        delete o.additionalItems;
+      } else delete o.items;
+    }
     for (const [excl, lim] of [["exclusiveMinimum", "minimum"], ["exclusiveMaximum", "maximum"]]) {
       if (typeof o[excl] === "boolean") {
         if (o[excl] === true && typeof o[lim] === "number") {
@@ -34928,11 +34904,54 @@ function mcpInputSchema2(s) {
   delete schema.$schema;
   return draft20202(schema);
 }
+var StartContactSchema2 = external_exports.object({
+  goalIds: external_exports.tuple([external_exports.string().uuid()]),
+  // THE ASK IS THE QUESTION, not a bulletin with a question at the end (2026-09-16).
+  //
+  // A DecisionNeed is settled only by an answer in the shape THIS ask declares. Bundle news,
+  // findings and a decision into one, and the person answers whichever part engaged them —
+  // which settles nothing, leaves the need open, and gets them asked again. On call 619c5a92
+  // one ask carried a briefing, a side question ("the ring should show the agent's name now —
+  // what did you actually see?") and a one-of-four about how far an erase reaches. The owner
+  // answered the side question. The need stayed open; the card asked again. Of the 45 call
+  // asks carrying a decision, 27 are over 600 characters.
+  //
+  // Sending them separately costs nothing, because a CALL contact joins the call already
+  // happening (`goal/store.ts`, JOIN BEFORE MINTING) — several contacts on one Goal arrive as
+  // one call, planned as its turns, and each keeps its own settleable need.
+  ask: external_exports.string().trim().min(1).max(1e4).describe(
+    "The question, and only what is needed to answer it. News, progress and findings are their own contact \u2014 a call contact JOINS a call already happening, so several arrive as one call. Do not bundle: a DecisionNeed is settled only by an answer in the shape this ask declares, so someone who answers the part that interested them settles nothing and is asked again."
+  ),
+  waiting: external_exports.enum(["none", "hard"]).default("none"),
+  channel: external_exports.enum(["notification", "call"]).default("notification"),
+  options: external_exports.array(external_exports.object({ label: external_exports.string().trim().min(1).max(1e3), image: external_exports.string().url().optional(), html: external_exports.string().max(16384).optional() }).strict()).min(2).max(6).optional(),
+  threadId: external_exports.string().uuid().optional().describe("Continue an existing Thread: the threadId a prior Delivery returned. Omit to start a new Thread.")
+}).strict();
+var ContactSchema2 = external_exports.union([StartContactSchema2, external_exports.object({ deliveryId: external_exports.string().uuid() }).strict()]);
+var CONTACT_SCHEMA2 = { type: "object", ...mcpInputSchema2(ContactSchema2) };
+var CONTACT_DESCRIPTION2 = "Contact the user about exactly one existing Goal: pass goalIds:[goalId], ask, channel:'notification'|'call', and waiting:'none'|'hard'. Options supply choices. Notification returns immediately; collect durable answers with claim_goal/get_goal. On stdio, a Call holds one cancellable ~45s window; continue with ONLY {deliveryId}. Continuation sends nothing and rereads the same durable evidence, including previously read answers. Entries retain authorship and provenance; accepted decisions are separate from quoted speech. Call state open does not mean ringing. Unsupported: soft waiting, multiple Goals/questions, outcome admission, and re-presentation of an existing request. Create a Goal explicitly first; never resend a pending ask to continue waiting.";
 var CreateGoalSchema2 = external_exports.object({
   outcome: external_exports.string().trim().min(1).max(1e4),
   ownerParticipant: external_exports.string().trim().min(1).optional(),
-  idempotencyKey: external_exports.string().trim().min(1).max(200)
+  idempotencyKey: external_exports.string().trim().min(1).max(200),
+  /** A past conversation this Goal should be read against — History's "new session from this"
+   *  (owner, on the call of 2026-09-14: "let's do the reference with the threading"). A
+   *  reference only: the owner reads it through `get_thread`, which does its own scoping, and
+   *  the writer refuses a thread belonging to another account. */
+  contextThreadId: external_exports.string().uuid().optional(),
+  /** THE GOAL THIS ONE BELONGS UNDER (owner, 2026-09-15: "the ask I gave for the design doc
+   *  didn't get created as a child goal of the voice UI goal, which is how it should've
+   *  worked"). It could not have been: this door took no parent, so the only route was
+   *  create -> claim -> `update_goal`, three calls with a lease in the middle, and every agent
+   *  took the short one. The hierarchy has been modelled since Goals existed and had been used
+   *  ZERO times in 2,031 of them. Absent, the server judges it against the caller's open Goals
+   *  (`apps/api/src/goal/intake.ts`). The writer refuses a Goal belonging to another account. */
+  parentGoalId: external_exports.string().uuid().optional()
 });
+var CreateGoalToolSchema2 = CreateGoalSchema2.extend({
+  idempotencyKey: CreateGoalSchema2.shape.idempotencyKey.optional().describe("Optional. One is minted per call; pass your own only so a retry lands on the same Goal.")
+}).strict();
+var CREATE_GOAL_DESCRIPTION2 = "Create a durable Goal for an outcome. Without parentGoalId it is placed against your open Goals: if one already IS this work, that Goal comes back (existing: true) and nothing new is created \u2014 continue it; if the work belongs under one, it is created there (parentGoalId in the receipt); otherwise it is a root. Pass parentGoalId yourself to put it under a specific Goal. Admission only: the owner must claim it before doing work, then update it as it advances. Returns an admission receipt with goalId, current state, revision, ownerParticipant, and the next step; no Goal content or execution lease.";
 var UpdateGoalSchema2 = external_exports.object({
   revision: external_exports.number().int().positive(),
   changes: external_exports.object({
@@ -34948,52 +34967,48 @@ var UpdateGoalSchema2 = external_exports.object({
   reason: external_exports.string().trim().min(1).max(2e3),
   operationId: external_exports.string().uuid().optional()
 }).strict();
-var UpdateGoalToolSchema2 = UpdateGoalSchema2.extend({ goalId: external_exports.string().uuid() }).strict();
+var UpdateGoalToolSchema2 = UpdateGoalSchema2.omit({ operationId: true }).extend({ goalId: external_exports.string().uuid() }).strict();
 var ClaimGoalSchema2 = external_exports.object({ goalId: external_exports.string().uuid().optional() }).strict();
-var fmtMin2 = (m) => m >= 60 ? `${m / 60} hr` : `${m} min`;
-var STANDARD_MEANS2 = (() => {
-  const plan = MISSED_CALL_PLAN2.backoff_standard;
-  const mins = plan.kind === "at" ? plan.minutes : [];
-  const parts = mins.map(fmtMin2);
-  const list = parts.length > 1 ? `${parts.slice(0, -1).join(", ")} and ${parts[parts.length - 1]}` : parts[0] ?? "";
-  return `Rings again ${list} after the missed call, then leaves it in your inbox`;
-})();
-function contactSchemaFrom2(fields) {
-  const surface = external_exports.object({
-    ask: fields.ask.describe(
-      `What to tell the user, or what you need to find out from them. Plain prose \u2014 as long as it needs to be (up to 10k characters); Paigy splits it into topics and reads back a few sentences at a time, so do NOT compress a briefing into one line. May be spoken aloud on a call, so write natural speech and name things (not IDs). Contact at exactly two moments: BLOCKED on a decision only they can make, or DONE (one short report \u2014 what shipped, how you verified it, what you flagged). DONE IS SAID ONCE: "all set", "nothing open on my end", "that thread is complete" are the same report in new words, and each one reaches them separately (live 2026-08-12: three of them in three minutes). After the first, you are finished speaking; if they acknowledge it, stop rather than confirming the acknowledgement. Progress is never a contact: set_work_state carries it, and working narration stays in your own terminal \u2014 the user sees you're working without being interrupted by it.`
-    ),
-    waiting: fields.waiting.describe(
-      "What happens to your work while you wait. 'none': you're just informing them. 'soft': you'd like an answer but can keep working. 'hard': you are STOPPED until they answer \u2014 reaches them urgently and escalates to a real phone call if unanswered."
-    ),
-    options: fields.options.describe(
-      `The choices the user picks from, when you have them \u2014 ${OPTIONS_MIN2} to ${OPTIONS_MAX2}, drawn from your own sentence.`
-    ),
-    channel: fields.channel.describe(
-      "Relay how the user explicitly said to reach them ('call me' \u2192 'call', 'just message/text me' \u2192 'message'), or use 'call' when promoting the same quiet ask after it becomes a substantial blocker. Omit otherwise; Paigy picks."
-    ),
-    parentId: fields.parentId.describe(
-      "To continue an earlier conversation, pass the parentId a previous contact or reply returned. Omit to start a new one."
-    ),
-    workId: fields.workId.describe(
-      "The durable Work this contact advances. Pass the workId from check_replies or a prior reply when asking for a decision that blocks that work."
-    ),
-    goalId: fields.goalId.describe(
-      "The target Goal this contact advances. Use goalId for the Goal model; do not combine it with workId."
-    ),
-    // THE WAIT, CONTINUED (owner, 2026-09-06: "await should have been folded into contact").
-    // A contact that rang holds its first window itself; the host caps one tool call at
-    // ~60 s, so keeping the line is another contact — with ONLY this field. Nothing is sent.
-    wait: external_exports.string().uuid().optional().describe(
-      "KEEP WAITING on a live call: the notificationId a previous contact returned. Send it ALONE \u2014 no ask, nothing new goes to the user; contact just holds the next ~45 s window and returns the outcome in `wait`."
-    )
-  });
-  const out = mcpInputSchema2(surface);
-  delete out.required;
-  out.anyOf = [{ required: ["ask"] }, { required: ["wait"] }];
-  return out;
+var GetGoalSchema2 = external_exports.object({ goalId: external_exports.string().uuid() }).strict();
+var GET_GOAL_DESCRIPTION2 = "Read the current authorized Goal brief: state, owner, blockers, open decisions, progress, and the next operation. Foreign or sibling-owned Goals are not disclosed.";
+var UPDATE_GOAL_DESCRIPTION2 = "Update an owned Goal at an exact revision. State, ownership, dependencies, children, progress, and review acknowledgement are explicit; stale revisions are rejected. Returns the new revision and a prose summary.";
+var CLAIM_GOAL_DESCRIPTION2 = "Claim the oldest runnable or review-pending Goal you own, or pass goalId to claim that Goal. Returns a Goal-scoped brief, current revision, blockers, and the next valid operation. Claiming creates or renews the execution lease.";
+var CHECK_REPLIES_DESCRIPTION2 = "Your open Deliveries: every Notification or Call currently addressed to you \u2014 a request the user started toward you, an answer relayed to something you asked, a handoff \u2014 each with its durable Entries, accepted decisions and open decision needs, in the same shape a contact read returns. A pure read with no arguments: nothing is consumed, acknowledged or claimed by reading it, so call it on startup, after a long wait, or whenever you want to know what is outstanding. To act on one, claim its Goal (claim_goal) or reread it with contact({deliveryId}). Your runnable and review-pending Goals come from claim_goal, not from here.";
+var CheckRepliesSchema2 = external_exports.object({}).strict();
+var GetThreadSchema2 = external_exports.object({
+  parentId: external_exports.string().describe("The Thread to read \u2014 the threadId a Delivery returned, or the parentId of a search hit.")
+}).strict();
+var GET_THREAD_DESCRIPTION2 = "Read the authorized durable Entries on one conversation Thread \u2014 what you wrote there and what was delivered to you, oldest first. Use claim_goal to find the work to resume; use this to rehydrate a Thread that a search hit or a Delivery named.";
+var SearchThreadsSchema2 = external_exports.object({
+  q: external_exports.string().describe("What to look for \u2014 plain words or a phrase (e.g. 'the livekit timeout', 'deploy to prod').")
+}).strict();
+var SEARCH_THREADS_DESCRIPTION2 = `Search your PAST conversations before asking \u2014 "have we discussed this before?". Full-text over your own threads (the asks you sent + the user's answers); returns ranked threads with highlighted snippets, NOT rows: { hits: [{ parentId, at, agentLabel, matches: [{ notificationId, role, snippet }] }] }. The loop this exists for: search first \u2192 get_thread the best hit to rehydrate it \u2192 THEN continue or contact, so you answer with receipts ("last week you said ship it") instead of re-asking. Read-only, safe to call anytime; scoped to your own account's threads.`;
+var AGENT_TOOLS2 = [
+  { name: "contact", description: CONTACT_DESCRIPTION2, inputSchema: CONTACT_SCHEMA2 },
+  { name: "check_replies", description: CHECK_REPLIES_DESCRIPTION2, inputSchema: mcpInputSchema2(CheckRepliesSchema2) },
+  { name: "get_thread", description: GET_THREAD_DESCRIPTION2, inputSchema: mcpInputSchema2(GetThreadSchema2) },
+  { name: "search_threads", description: SEARCH_THREADS_DESCRIPTION2, inputSchema: mcpInputSchema2(SearchThreadsSchema2) },
+  { name: "create_goal", description: CREATE_GOAL_DESCRIPTION2, inputSchema: mcpInputSchema2(CreateGoalToolSchema2) },
+  { name: "claim_goal", description: CLAIM_GOAL_DESCRIPTION2, inputSchema: mcpInputSchema2(ClaimGoalSchema2) },
+  { name: "get_goal", description: GET_GOAL_DESCRIPTION2, inputSchema: mcpInputSchema2(GetGoalSchema2) },
+  { name: "update_goal", description: UPDATE_GOAL_DESCRIPTION2, inputSchema: mcpInputSchema2(UpdateGoalToolSchema2) }
+];
+var AGENT_TOOL_NAMES2 = AGENT_TOOLS2.map((t) => t.name);
+function entryWords(entry) {
+  const content = entry.content;
+  if (content && "sealed" in content) return "";
+  const plain = content?.plain;
+  if (typeof plain === "string") return plain;
+  if (plain && typeof plain === "object") {
+    const text = plain.text;
+    if (typeof text === "string") return text;
+    const title = plain.title;
+    const description = plain.description;
+    const parts = [title, ...Array.isArray(description) ? description : []].filter((v) => typeof v === "string");
+    if (parts.length) return parts.join("\n\n");
+  }
+  return entry.sources.map((source) => source.text).join("\n");
 }
-var CONTACT_DESCRIPTION2 = `Reach the user through Paigy \u2014 tell them something, or ask and get their answer. State what you need in \`ask\`, say what happens to your work while you wait in \`waiting\`, and Paigy handles the rest (channel, phrasing, answer format). If the user explicitly asks you to CALL them, send waiting:'hard' and say so in the ask. Returns { notificationId, parentId, workId?, goalId?, entryId?, decisionId?, wait? }. WHEN IT RANG, contact holds the first ~45 s window ITSELF and \`wait\` carries the outcome: { type:'reply', answer } to act on; { type:'partial', inFlight:true, turn } \u2014 what the user is saying to each turn, provisional: use it to PREPARE (fetch, draft, warm the build), never to act irreversibly, they can still revise it until the final reply (partial = intelligence, settled = authorization; if a partial's acts carry a question aimed at you and you know the answer, contact on the SAME parentId right away \u2014 they hear it on the same call); { type:'remind', remindInSeconds } \u2014 schedule a wake-up; { type:'idle' } \u2014 still waiting. TO KEEP WAITING, call contact again with ONLY { wait: notificationId } \u2014 no ask, nothing new is sent; it holds the next scoped ~45 s window (under the 60 s host cap, so it always returns) and never returns another notification's reply. Keep doing that until the reply \u2014 THAT one is the decision \u2014 so the user steps away and comes back to find you already continued; stop only to do other work and check back, or after an unreasonably long stretch worth telling them about. A message delivery has NO \`wait\`: never poll for it \u2014 the reply arrives through check_replies or your wake. Pass parentId to a later contact to continue the conversation. A Goal-targeted contact also returns goalId and entryId for the durable Goal entry. When it rang, the reply also carries { ifMissed: { mode, means } }: what the user's own policy does with a call they don't take ("${STANDARD_MEANS2}"), so a no-answer tells you how long to wait before coming back. THREADING REPLACES: a threaded follow-up SUPERSEDES your earlier pending items on that thread \u2014 right for updates to one ask, WRONG for a checklist (send independent to-dos un-threaded). A threaded re-send with IDENTICAL content escalates the pending ask in place. If a reply comes back as {kind:'clarify', chunks:[...]}, the user wants more detail \u2014 contact again on the SAME parentId with an expanded ask. BLOCKED ON A DECISION for existing work? Pass that work's \`workId\`; the reply returns the same workId plus a decisionId, so the answer resumes the right outcome. ONE ASK, ONE ROW: never restate a still-pending ask's question inside a NEW contact (e.g. weaving it into a briefing) \u2014 the whole answer settles on the new row and the original can never receive it. Keep waiting on the original (a live call reads every pending ask out separately, each answer routes to its own row), and use \`needs\` for a genuinely multi-part NEW ask. ANSWERABLE, NOT JUST ASKED: when the reply comes back carrying \`plan.units[].needs\`, that unit asked for something it gave the user no way to answer \u2014 'options' means it posed a choice with nothing to choose from, 'visuals' means it asked about something to look at with nothing to look at. Send it again on the SAME parentId with ${OPTIONS_MIN2}-${OPTIONS_MAX2} options (or the image), drawn from your own sentence. Paigy will not add them for you: a shape it guessed wrong cannot be undone, and you are the one who knows what the real alternatives are. \`units\` reports WHAT BECAME OF YOUR PROSE \u2014 { kept, raw, why }: how many topics Paigy compressed for delivery, how many kept your exact words, and the reason when it kept them (e.g. 'no_output' = compression produced nothing usable, so the user got your raw sentence). It needs no action and is not an error \u2014 read it only when the delivered wording matters to you; a high \`raw\` count means the user is hearing you verbatim. READING A CALL'S REPLY: it can come back as {kind:'turns', turns:[{prompt,reply}]} \u2014 the ordered log of that call. Read turns[0].reply as the user's main instruction. Usually that's the only turn; if there are more (e.g. an end-of-call 'call me back when it's done / I have a question that blocks me'), read each one in order as a further follow-up instruction, not a single combined one. If they asked for a callback, re-engage in the SAME thread (contact with the reply's parentId) when the task is done or you hit a blocker \u2014 waiting:'hard' for a blocker, waiting:'none' for done. Paigy has no scheduler; the callback is yours to send (use ScheduleWakeup/cron for timing). A call-mapped answer may carry \`intents\` \u2014 next steps the user attached, each { kind, detail } with detail quoting their words. ACT on them, don't just read them: 'defer' ("call me after lunch") \u2192 register it NOW with schedule_callback \u2014 when the intent carries \`dueInSeconds\` (Paigy pre-parsed the spoken time against the user's clock) pass it straight through; otherwise derive it from the detail yourself \u2014 then follow up on the same thread; 'delegate' ("you pick") \u2192 make the call yourself and tell them what you chose; 'channel' ("text me next time") \u2192 honor it on your next contact (channel:'message'); 'question' (an open question aimed back at you that the call couldn't answer) \u2192 you OWE them the answer \u2014 work it out and follow up on the same thread without being asked, the call deliberately skipped "should I call you back?" because the follow-up is implied. \`transcript\` is the user's raw words behind a shaped answer \u2014 read it for hedges and conditions ("yes, IF tests pass") before acting. If your ask declared \`points\`, the reply carries \`covered\` \u2014 the points actually addressed. Compare against what you declared: a missing point is STILL unanswered \u2014 re-ask it (contact on the same parentId) or proceed knowingly partial; never treat a partial answer as complete.`;
 var ContextSchema2 = external_exports.object({
   title: external_exports.string().min(1).describe("One-line headline of what you need (required, non-empty)."),
   description: external_exports.array(external_exports.string().min(1)).describe(
@@ -35222,35 +35237,8 @@ var NotifyRequestSchema2 = NotifyRequestFields2.superRefine((r, ctx) => {
   if (!needsOptions && r.options?.length)
     ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: ["options"], message: `select:'${r.select}' takes no options` });
 });
-function unitsOf2(text) {
-  const spans = [];
-  const re = /\n\s*\n+/g;
-  let cursor = 0;
-  const push = (from, to) => {
-    const slice = text.slice(from, to);
-    const lead = slice.length - slice.trimStart().length;
-    const tail = slice.length - slice.trimEnd().length;
-    if (from + lead < to - tail) spans.push({ start: from + lead, end: to - tail });
-  };
-  for (let m = re.exec(text); m; m = re.exec(text)) {
-    push(cursor, m.index);
-    cursor = m.index + m[0].length;
-  }
-  push(cursor, text.length);
-  return spans;
-}
 var NotifyStatusSchema2 = external_exports.enum(["pending", "answered", "ignored"]);
 var AgentStateSchema2 = external_exports.enum(["idle", "in_progress", "completed", "needs_input"]);
-var SetTaskStateSchema2 = external_exports.object({
-  state: external_exports.enum(["in_progress", "completed", "needs_input"])
-});
-var SetWorkStateSchema2 = external_exports.object({
-  workId: external_exports.string().uuid().optional(),
-  notificationId: external_exports.string().optional(),
-  state: SetTaskStateSchema2.shape.state
-}).refine((value) => Number(Boolean(value.workId)) + Number(Boolean(value.notificationId)) === 1, {
-  message: "exactly one of workId or notificationId is required"
-});
 var TurnSchema2 = external_exports.object({
   prompt: external_exports.string(),
   reply: external_exports.string()
@@ -35380,108 +35368,6 @@ var AwaitItemSchema2 = external_exports.discriminatedUnion("type", [
   })
 ]);
 var CallbackTriggerSchema2 = external_exports.enum(["on_done", "on_blocked", "scheduled"]);
-var ScheduleCallbackSchema2 = external_exports.object({
-  parentId: external_exports.string().describe("The thread to call back on (from a prior contact / reply / request)."),
-  goalId: external_exports.string().uuid().optional().describe("The Goal this callback advances; preferred for Goal-owned work."),
-  trigger: CallbackTriggerSchema2,
-  dueInSeconds: external_exports.number().int().positive().optional().describe("For 'scheduled' only: how many seconds from now to fire."),
-  note: external_exports.string().optional().describe("What to tell the user when you follow up.")
-});
-var PendingRepliesSchema2 = external_exports.object({
-  replies: external_exports.array(
-    external_exports.object({
-      parentId: external_exports.string(),
-      notificationId: external_exports.string(),
-      workId: external_exports.string().uuid().optional(),
-      decisionId: external_exports.string().uuid().optional(),
-      answer: UserAnswerSchema2,
-      /** E2EE: the sealed answer (opaque envelope + plaintext `ignored` hint) when the
-       *  pairing is E2EE — the agent opens it and re-derives the real answer. Absent =
-       *  plaintext answer (in `answer`). See AwaitItemSchema's reply variant. */
-      sealed: external_exports.lazy(() => SealedAnswerSchema2).optional(),
-      /** The call record rendered for THIS agent: the raw words the shaped answer was
-       *  mapped from, filtered to its own claims. See AwaitItemSchema's reply variant. */
-      transcript: external_exports.string().optional(),
-      /** Coverage report (#396): which declared `points` this answer addressed. */
-      covered: external_exports.array(external_exports.string()).optional()
-    })
-  ),
-  pending: external_exports.array(
-    external_exports.object({ parentId: external_exports.string(), notificationId: external_exports.string(), createdAt: external_exports.string() })
-  ),
-  /** WHO YOU ARE on this account (field report 2026-08-28): the name and device the user
-   *  sees for this session's identity. From inside a session there was no way to find out —
-   *  `pair` with no arguments can HATCH a fresh identity, so it is not a safe probe — and an
-   *  agent that cannot tell which agent it is cannot tell whether work addressed to
-   *  "Reta" was addressed to it. Absent only for a token with no pairing behind it. */
-  you: external_exports.object({ name: external_exports.string(), device: external_exports.string().nullable(), tokenId: external_exports.string() }).optional(),
-  /** User-initiated requests addressed to this agent; act on them and reply via
-   *  contact on the same parentId. Keeps reappearing until you call
-   *  set_work_state on its workId (or notificationId once while bootstrapping). */
-  requests: external_exports.array(
-    external_exports.object({
-      parentId: external_exports.string(),
-      notificationId: external_exports.string(),
-      workId: external_exports.string().uuid().optional(),
-      text: external_exports.string(),
-      createdAt: external_exports.string(),
-      /** The user seeded this request with a past conversation — call get_thread on it
-       *  FIRST and treat the transcript as prior context (#57/#251). */
-      contextParentId: external_exports.string().optional(),
-      /** STRANDED (field report 2026-08-28): this request was addressed to ANOTHER agent on
-       *  the account — the name here — which has not been seen since it landed, so nobody
-       *  came for it. Handed to you because you are the session that is here. Take it like
-       *  any request (set_work_state claims it, reply with contact on its parentId), and say
-       *  whose it was, because the user chose that agent on purpose. */
-      stranded: external_exports.string().optional()
-    })
-  ),
-  /** Durable outcomes currently owned by this agent. This is the Work-native queue; flat
-   * notification lists remain during migration so old clients keep their existing view. */
-  work: external_exports.array(external_exports.object({
-    workId: external_exports.string().uuid(),
-    parentId: external_exports.string().optional(),
-    objective: external_exports.string().nullable(),
-    state: external_exports.enum(["active", "blocked", "waiting_external"]),
-    blockedOn: external_exports.array(external_exports.string().uuid()),
-    updatedAt: external_exports.string()
-  })).optional(),
-  /** Callbacks you owe the user that are now DUE (you said you'd follow up when done,
-   *  if blocked, or at a time that has passed). Re-surfaced every sweep until you
-   *  fulfill one by calling contact on its parentId. */
-  /** Ride-alongs (RideAlongSchema): notes assigned to this agent that no wake could
-   *  reach. Same array the contact/await replies carry — one queue, every carrier. */
-  also: external_exports.array(RideAlongSchema2).optional(),
-  owedCallbacks: external_exports.array(
-    external_exports.object({ parentId: external_exports.string(), trigger: CallbackTriggerSchema2, note: external_exports.string() })
-  ),
-  /** Work (either direction) you reported in_progress a while ago and never reported
-   *  completed — likely left half-done by this session or a prior one that crashed or
-   *  went idle. Report a real state (set_work_state) or continue the work. */
-  stalled: external_exports.array(
-    external_exports.object({ parentId: external_exports.string(), notificationId: external_exports.string(), title: external_exports.string().nullable(), startedAt: external_exports.string() })
-  ),
-  /** The queue rail (#614, pending/design.md): the same replies + requests, grouped by
-   *  thread and ordered oldest-thread-first, so you work ONE thread at a time — fold all of
-   *  a thread's `items` into a single turn rather than interleaving threads. `busy` = the
-   *  thread already has a turn in progress (younger than the stall cutoff); let it finish and
-   *  ride the next turn. `items` are that thread's replies/requests in arrival order; the
-   *  full payload for each is in the flat `replies`/`requests` arrays (matched by
-   *  notificationId). Derived, never stored — a crashed agent recomputes it exactly. */
-  threads: external_exports.array(
-    external_exports.object({
-      parentId: external_exports.string(),
-      busy: external_exports.boolean(),
-      items: external_exports.array(
-        external_exports.object({
-          kind: external_exports.enum(["reply", "request"]),
-          notificationId: external_exports.string(),
-          at: external_exports.string()
-        })
-      )
-    })
-  )
-});
 var NotifyResponseSchema2 = external_exports.object({
   notificationId: external_exports.string(),
   workId: external_exports.string().uuid().optional(),
@@ -35544,6 +35430,13 @@ var UserResponseSchema2 = external_exports.object({
 });
 var VoiceKeySchema2 = external_exports.enum(["rachel", "george", "jessica", "brian", "lily"]);
 var AgendaTurnSchema2 = external_exports.object({
+  /** THE TURN'S IDENTITY (the first-sentence stream, 2026-09-09): the brain call that wrote
+   *  it and its place in that reply — `<brainCallId>:<index>`, with `:p` on the first
+   *  sentence a re-plan publishes ahead of the rest. A turn is spoken once, by this id: the
+   *  completion of a streamed re-plan carries the published sentence again, and the walk
+   *  drops what it already said by identity, never by the API's guess of what was polled.
+   *  Absent on plans nothing streams (a ring plan, a floor). */
+  id: external_exports.string().optional(),
   /** Twin coverage (#1089): sibling claim ids this asking turn's answer ALSO settles —
    *  the planner declares duplicates instead of asking them twice. */
   coveredIds: external_exports.array(external_exports.string()).optional(),
@@ -35702,7 +35595,21 @@ var InboxItemSchema2 = external_exports.object({
   /** E2EE: the agent's device X25519 public key to seal the user's answer BACK to (the
    *  sender the phone replies to). Sourced server-side from this item's pairing credential.
    *  Present only alongside `envelope`; the phone seals via sealAnswer(answer, this, id). */
-  agentX25519: external_exports.string().optional()
+  agentX25519: external_exports.string().optional(),
+  /** THE TARGET FACTS A CARD RENDERS (#1796 point 5, 2026-09-11): the Delivery it is a view of,
+   *  that Delivery's kind, the request Entry, the Goals it answers for, the exact DecisionNeed (none
+   *  for a request that asks nothing), whether its content is sealed, and that Goal's state. The
+   *  answer writer (`POST /api/entries`) and the disposition (`close_delivery`) take their ids from
+   *  here. The server projects it (`apps/api/src/inbox/project.ts`); a client never builds it. */
+  communication: external_exports.object({
+    deliveryId: external_exports.string(),
+    kind: external_exports.enum(["notification", "call"]),
+    entryId: external_exports.string(),
+    goalIds: external_exports.array(external_exports.string()),
+    decisionNeedId: external_exports.string().optional(),
+    sealed: external_exports.boolean(),
+    goalState: external_exports.string().optional()
+  }).optional()
 });
 var SnoozeRequestSchema2 = external_exports.object({
   requestId: external_exports.string(),
@@ -35938,26 +35845,54 @@ var CreateRequestSchema2 = external_exports.object({
    *  the agent reads it via get_thread. Must belong to the requesting user. */
   contextParentId: external_exports.string().optional()
 });
-var HandoffSchema2 = external_exports.object({
-  /** Move this existing outcome to `target` without reminting it. Requires `target`. */
-  workId: external_exports.string().uuid().optional(),
-  /** Land the note on an existing thread; omitted mints a fresh one. */
-  parentId: external_exports.string().uuid().optional(),
-  /** One-line headline of the working context handed off. */
-  title: external_exports.string().min(1),
-  /** The brief — standalone notes the successor reads (what was done, what's left, links). */
-  notes: external_exports.array(external_exports.string().min(1)).min(1),
-  /** A sibling connection to dispatch directly to (token id or agent nickname). Same-account
-   *  only; omit to leave the thread for the user to hand off in the app. */
-  target: external_exports.string().optional(),
-  /** Write the note as a RECAP (kind:'recap', #617): a summary turn that supersedes the
-   *  thread's earlier turns for rehydration — get_thread returns the latest recap + only
-   *  the turns after it. Handoff-to-a-successor and handoff-to-yourself-later are the
-   *  same primitive; a recap is one whose audience includes you. */
-  recap: external_exports.boolean().optional()
-}).refine((value) => !value.workId || Boolean(value.target), {
-  message: "target is required when handing off Work",
-  path: ["target"]
+var QueueQuestionSchema2 = external_exports.object({
+  /** The decision need's id — what an answer is accepted against. */
+  id: external_exports.string(),
+  /** The words that were asked, from the request Entry that asked them. */
+  question: external_exports.string(),
+  /** Where it was asked — which is where the ruling goes (`POST /api/entries`). Null only
+   *  for a need whose request Entry is carried by no interactive Delivery, which nothing
+   *  can answer. */
+  deliveryId: external_exports.string().nullable().default(null),
+  /** The Entry the ruling is about. */
+  aboutId: external_exports.string().nullable().default(null),
+  /** Empty for a free-text question. */
+  options: external_exports.array(OptionSchema2).default([]),
+  select: external_exports.enum(["one", "many", "rank", "confirm", "text"]).default("text"),
+  askedAt: external_exports.string(),
+  /** Null while the question is open — which is how the page tells the two apart. */
+  answeredAt: external_exports.string().nullable().default(null),
+  /** The ruling in the person's own words, from the contribution that replied — not the
+   *  option id, which is not something anyone reads back. Null while it is open, and null
+   *  for a settled question whose reply carried nothing readable. */
+  answer: external_exports.string().nullable().default(null)
+});
+var QueueItemSchema2 = external_exports.object({
+  id: external_exports.string(),
+  /** One-line headline — the first sentence of the outcome. */
+  title: external_exports.string(),
+  /** The outcome in full, verbatim: the person's own words are what an assignee sees. */
+  intent: external_exports.string(),
+  /** `ready` | `active` | `waiting` | `done` | `cancelled`, straight off the Goal. */
+  state: external_exports.string(),
+  /** Who holds it (a participant ref); null when nobody does yet. */
+  assignee: external_exports.string().nullable().default(null),
+  /** What the agent last said it was doing; null if it has said nothing. */
+  progress: external_exports.string().nullable().default(null),
+  reviewPending: external_exports.boolean().default(false),
+  dueAt: external_exports.string().nullable().default(null),
+  /** The Goal this one was opened under; null at the root. */
+  parentGoalId: external_exports.string().nullable().default(null),
+  /** Goals opened under this one — only those the same list holds. */
+  childGoalIds: external_exports.array(external_exports.string()).default([]),
+  /** Goals this one waits on (start or finish gates). */
+  dependencyGoalIds: external_exports.array(external_exports.string()).default([]),
+  /** True while any gate is on a Goal that is not done — the walk draws it dashed. */
+  blocked: external_exports.boolean().default(false),
+  /** Every decision need on it, open or settled — the page decides which to show. */
+  questions: external_exports.array(QueueQuestionSchema2).default([]),
+  createdAt: external_exports.string(),
+  updatedAt: external_exports.string().nullable().default(null)
 });
 var NoteSourceSchema2 = external_exports.enum(["app", "call"]);
 var NoteStatusSchema2 = external_exports.enum(["open", "assigned", "in_progress", "done"]);
@@ -36094,15 +36029,29 @@ var OAuthStartSchema2 = external_exports.object({
 var DeliveryConfigSchema2 = external_exports.object({
   tokenId: external_exports.string(),
   mode: DeliveryModeSchema2,
-  /** null when the server has no SUPABASE_ANON_KEY set — the listener then falls
-   *  back to its own PAIGY_SUPABASE_URL / PAIGY_SUPABASE_ANON_KEY env. */
+  /** null when the deployment has no anon key configured. `self_hosted` is then REFUSED
+   *  (503 `self_hosted_unavailable`) rather than registered, so a self_hosted config always
+   *  carries credentials; only a `poll` registration can come back with null here. */
   realtime: external_exports.object({ url: external_exports.string(), anonKey: external_exports.string() }).nullable()
 });
 var StatusSchema2 = external_exports.object({
   name: external_exports.string(),
   sessionMode: external_exports.enum(["default", "all_calls", "silent"]),
   /** A phone is registered for push/ring (any push token on the account). */
-  phone: external_exports.boolean()
+  phone: external_exports.boolean(),
+  /** HOW MANY THINGS ARE WAITING ON THIS IDENTITY — replies it never collected and requests
+   *  it never picked up. THE SAME NUMBER the harness's wake gate reads
+   *  (`pendingSummary.unacknowledged`), from the same function, because a statusline saying
+   *  zero while the sweep sees one is two ideas of "waiting".
+   *
+   *  Why it is here at all (owner, 2026-09-07): nothing can interrupt an idle agent process
+   *  that nobody spawned, so a terminal session only learns of work by asking. The harness
+   *  used to paper over that by spawning a SECOND process on the identity; now it stands
+   *  back, correctly, and the person sitting at the terminal is the one who can act. A
+   *  coffee-beans request sat unread for three days.
+   *
+   *  Optional: an older API sends no field, and the statusline then renders exactly as before. */
+  waiting: external_exports.number().int().nonnegative().optional()
 });
 var EnvelopeRecipientSchema2 = external_exports.object({
   keyId: external_exports.string(),
@@ -36268,18 +36217,31 @@ var FeedbackOutcomeSchema2 = external_exports.object({
   message: external_exports.string(),
   childIds: external_exports.array(external_exports.string()).optional()
 });
-var CONTACT_SCHEMA2 = contactSchemaFrom2({
-  ask: NotifyRequestFields2.shape.ask,
-  waiting: NotifyRequestFields2.shape.waiting,
-  options: NotifyRequestFields2.shape.options,
-  channel: NotifyRequestFields2.shape.channel,
-  parentId: NotifyRequestFields2.shape.parentId,
-  workId: NotifyRequestFields2.shape.workId,
-  goalId: NotifyRequestFields2.shape.goalId
-});
 
-// src/paigy/conversation.ts
+// src/paigy/activity.ts
+function shortenPaths(s) {
+  return s.replace(/(?<![\w.@+-])(?:\/[\w.@+-]+){3,}/g, (p) => {
+    const parts = p.split("/").filter(Boolean);
+    return `\u2026/${parts.slice(-2).join("/")}`;
+  });
+}
+function workLine(event) {
+  const note = (event.note ?? "").split("\n").find((l) => l.trim()) ?? "";
+  const line = shortenPaths([event.tool.trim(), note.trim()].filter(Boolean).join(" \u2014 ").replace(/\s+/g, " "));
+  return line.length > ACTIVITY_LINE_MAX2 ? `${line.slice(0, ACTIVITY_LINE_MAX2 - 1)}\u2026` : line;
+}
+function pushWork(lines2, line) {
+  if (!line || lines2[lines2.length - 1] === line) return [...lines2];
+  return [...lines2, line].slice(-ACTIVITY_LINES2);
+}
+function sameTail(a, b) {
+  return a.length === b.length && a.every((l, i) => l === b[i]);
+}
+
+// src/paigy/bridge.ts
 init_dist();
+
+// src/paigy/conversation.ts
 function endsWithQuestion(text) {
   if (!text) return false;
   const tail = text.trim().split("\n").filter(Boolean).slice(-3).join(" ").toLowerCase();
@@ -36292,57 +36254,60 @@ function endsWithQuestion(text) {
 }
 var POLL_MS = 5e3;
 var wait = () => new Promise((r) => setTimeout(r, POLL_MS));
-async function drainInput(state, deps = {}) {
-  if (!state.parentId && !state.exclusive) return [];
-  let work;
-  try {
-    work = await (deps.check ?? checkReplies)();
-  } catch {
-    return [];
+var ended = (state) => state === "done" || state === "cancelled";
+function unheard(brief, state) {
+  const seen = state.seen ??= /* @__PURE__ */ new Set();
+  const words2 = [];
+  for (const e of brief.entries ?? []) {
+    if (seen.has(e.entryId) || !e.authorParticipant.startsWith("human:")) continue;
+    seen.add(e.entryId);
+    if (e.aboutId && seen.has(e.aboutId) && brief.answers?.some((a) => a.requestEntryId === e.aboutId)) continue;
+    const text = entryWords(e).trim();
+    if (text) words2.push(text);
+  }
+  return words2;
+}
+async function step(session, state, rail) {
+  if (!state.goal) {
+    if (!state.resting) return;
+    const brief2 = await rail.claim();
+    if (!brief2.goalId || brief2.revision === void 0) return;
+    unheard(brief2, state);
+    if (ended(brief2.state)) await rail.update(brief2.goalId, { revision: brief2.revision, changes: { reviewed: true }, reason: "Typed into the session." });
+    else state.goal = { id: brief2.goalId, revision: brief2.revision };
+    send(session, state, brief2.message);
+    return;
   }
-  const ours = (parentId) => state.exclusive || parentId === state.parentId;
-  const opening = !!state.exclusive && !state.parentId;
-  const claimable = (notificationId) => opening || state.resting === true || !state.sharedWithAgent || (state.mine?.has(notificationId) ?? false);
-  const mine = [
-    ...work.replies.filter((r) => ours(r.parentId) && claimable(r.notificationId)).map((r) => ({ notificationId: r.notificationId, parentId: r.parentId, answer: r.answer })),
-    ...work.requests.filter((r) => ours(r.parentId) && claimable(r.notificationId)).map((r) => ({ notificationId: r.notificationId, parentId: r.parentId, answer: { kind: "text", text: r.text } }))
-  ];
-  const claimed = [];
-  for (const item of mine) {
-    try {
-      const ack = await (deps.ack ?? setTaskState)(item.notificationId, "in_progress");
-      if (ack?.won === false) continue;
-      claimed.push(item);
-    } catch {
-    }
+  const brief = await rail.read(state.goal.id);
+  state.goal.revision = brief.revision ?? state.goal.revision;
+  for (const answer of brief.answers ?? []) {
+    const resolve3 = state.asks?.get(answer.requestEntryId);
+    if (!resolve3) continue;
+    state.asks.delete(answer.requestEntryId);
+    resolve3(answer.result);
+  }
+  if (ended(brief.state)) {
+    state.goal = void 0;
+    for (const resolve3 of state.asks?.values() ?? []) resolve3(null);
+    state.asks?.clear();
+    return;
   }
-  return claimed;
+  if (state.asks?.size || !state.resting) return;
+  const words2 = unheard(brief, state);
+  if (words2.length) send(session, state, words2.join("\n\n"));
 }
-async function nextTurnFrom(event, state, deps = {}) {
-  if (!endsWithQuestion(event.result)) return null;
-  const answer = await askQuestion(event.result ?? "", state, deps);
-  return answer?.trim() ? answer : null;
+function send(session, state, text) {
+  state.resting = false;
+  session.send(text);
 }
-async function pump(session, state, deps = {}) {
+async function pump(session, state, rail, opts) {
   for (; ; ) {
-    for (const item of await drainInput(state, deps)) {
-      state.parentId ??= item.parentId;
-      const key = state.asks?.has(item.notificationId) ? item.notificationId : state.asks?.keys().next().value;
-      const resolve3 = key !== void 0 ? state.asks?.get(key) : void 0;
-      if (key !== void 0 && resolve3) {
-        state.asks?.delete(key);
-        resolve3(item.answer);
-        continue;
-      }
-      const words2 = spokenText(item.answer);
-      if (words2) {
-        state.resting = false;
-        session.send(words2);
-      }
+    try {
+      await step(session, state, rail);
+    } catch {
     }
-    const keepGoing = await deps.onIdle?.() ?? false;
-    if (!keepGoing) return;
-    await (deps.pause ?? wait)();
+    if (!await opts.onIdle()) return;
+    await (opts.pause ?? wait)();
   }
 }
 
@@ -36364,530 +36329,107 @@ var DESTRUCTIVE = [
 function isDestructive(summary) {
   return DESTRUCTIVE.some((re) => re.test(summary));
 }
-function levelFor(event) {
-  switch (event.kind) {
-    case "turn":
-      return "inbox";
-    case "permission":
-      return isDestructive(event.summary) ? "call" : "banner";
-    case "idle":
-      if (endsWithQuestion(event.result)) return "banner";
-      return event.failed ? "push" : "inbox";
-    case "work":
-      return "inbox";
-    // moot — entryFor drops work before a level ever matters
-    case "error":
-      return "inbox";
-  }
-}
 
 // src/paigy/bridge.ts
+function railFor(opts) {
+  return {
+    claim: () => claimGoal(void 0, opts),
+    read: (goalId) => getGoal(goalId, opts),
+    update: (goalId, input) => updateGoal(goalId, input, opts),
+    // One read and back: the pump owns the waiting, so a Call must not hold a window here.
+    contact: (input) => contact(input, { ...opts, waits: false })
+  };
+}
 function cancelAsks(state) {
-  for (const resolve3 of state.asks?.values() ?? []) resolve3({ kind: "ignored" });
+  for (const resolve3 of state.asks?.values() ?? []) resolve3(null);
   state.asks?.clear();
 }
-function entryFor(event, state = {}) {
-  const common = {
-    ...state.parentId ? { parentId: state.parentId } : {},
-    ...state.repo ? { repo: state.repo } : {},
-    ...state.branch ? { branch: state.branch } : {},
-    urgency: levelFor(event)
-  };
-  switch (event.kind) {
-    case "turn": {
-      const who = event.role === "agent" ? "Agent" : "You";
-      const body = event.text ? event.role === "agent" ? event.text : `${who}: ${event.text}` : `${who} ran ${(event.tools ?? []).join(", ")}.`;
-      return {
-        ...common,
-        ask: body
-        // No `select`: the contract refuses it on the `ask` form ("the broker derives it"),
-        // and with no options it derives "text" anyway — the shape this wants, since any
-        // inbox row can be replied to and a reply to history is just the user initiating
-        // (the pump feeds it back in).
-      };
-    }
-    case "permission":
-      return {
-        ...common,
-        context: {
-          title: clip(event.summary),
-          description: [
-            `The agent is blocked waiting to run: ${event.summary}`,
-            ...event.reason ? [event.reason] : []
-          ]
-        },
-        select: "confirm",
-        confirmStyle: "approve",
-        // Literally true, and the inbox uses it: a blocking item gets the badge and the
-        // extra confirm-before-dismiss, which is exactly right for something holding a
-        // real process still.
-        blocking: true
-      };
-    case "idle": {
-      const asking = endsWithQuestion(event.result);
-      const result = event.result?.trim();
-      const norm = (t) => (t ?? "").replace(/\s+/g, " ").trim();
-      if (result && !event.failed && norm(result) === norm(state.lastAgentText)) {
-        if (!asking) return null;
-        const spans = unitsOf2(result);
-        const tail = spans.map((sp) => result.slice(sp.start, sp.end)).reverse().find((t) => t.includes("?"));
-        return { ...common, ask: tail ?? result, blocking: true };
-      }
-      const lead = asking ? "" : event.failed ? "The agent stopped without finishing. " : "Turn complete. ";
-      return {
-        ...common,
-        ask: `${lead}${result || (event.failed ? "No result reported." : "Done.")}`,
-        ...asking ? { blocking: true } : {}
-      };
+var ALLOW = "Allow";
+function decisionFrom(result) {
+  if (result && "kind" in result) {
+    if (result.kind === "one") return result.option.label === ALLOW ? { allow: true } : { allow: false, reason: "Denied from Paigy" };
+    if (result.kind === "confirm") return result.approved ? { allow: true } : { allow: false, reason: "Denied from Paigy" };
+    if (result.kind === "text") {
+      if (/^(yes|y|ok|okay|approve[d]?|allow|go ahead|do it)\b/.test(result.text.trim().toLowerCase())) return { allow: true };
+      return { allow: false, reason: result.text };
     }
-    case "work":
-      return null;
-    // log-only by contract — the live texture of the working log
-    case "error":
-      return null;
-  }
-}
-function decisionFrom(answer) {
-  if (answer.kind === "confirm") {
-    return answer.approved ? { allow: true } : { allow: false, reason: "Denied from Paigy" };
-  }
-  if (answer.kind === "text") {
-    const said = answer.text.trim().toLowerCase();
-    if (/^(yes|y|ok|okay|approve[d]?|allow|go ahead|do it)\b/.test(said)) return { allow: true };
-    return { allow: false, reason: answer.text };
-  }
-  if (answer.kind === "turns") {
-    const first = answer.turns[0]?.reply ?? "";
-    return decisionFrom({ kind: "text", text: first });
   }
   return { allow: false, reason: "No approval given" };
 }
-async function mirror(event, state, deps = {}) {
-  const entry = entryFor(event, state);
-  if (event.kind === "turn" && event.role === "agent" && event.text) state.lastAgentText = event.text;
-  if (!entry) return {};
-  let req;
-  try {
-    req = NotifyRequestSchema2.parse(entry);
-  } catch (e) {
-    console.error(`paigy: mirror entry failed the contract \u2014 a bridge bug, not the network: ${e instanceof Error ? e.message.slice(0, 300) : String(e)}`);
-    return {};
-  }
-  try {
-    const { notificationId, parentId } = await (deps.submit ?? submitNotification)(req);
-    (state.mine ??= /* @__PURE__ */ new Set()).add(notificationId);
-    return { parentId, notificationId };
-  } catch {
-    return {};
-  }
-}
-function awaitAnswer(state, notificationId) {
-  state.asks ??= /* @__PURE__ */ new Map();
-  return new Promise((resolve3) => state.asks.set(notificationId, resolve3));
-}
-async function askPermission(event, state, deps = {}) {
-  const entry = entryFor(event, state);
-  if (!entry) return { decision: { allow: false, reason: "Could not ask" } };
-  try {
-    const sent = await (deps.submit ?? submitNotification)(NotifyRequestSchema2.parse(entry));
-    (state.mine ??= /* @__PURE__ */ new Set()).add(sent.notificationId);
-    const answer = await awaitAnswer(state, sent.notificationId);
-    return { decision: decisionFrom(answer), parentId: sent.parentId };
-  } catch (e) {
-    return { decision: { allow: false, reason: `Could not reach Paigy: ${e.message}` } };
+function wordsOf(result) {
+  if (!result || !("kind" in result)) return null;
+  switch (result.kind) {
+    case "text":
+      return result.text.trim() || null;
+    case "confirm":
+      return result.approved ? "yes" : "no";
+    case "one":
+      return result.option.label;
+    case "many":
+    case "rank":
+      return result.options.map((o) => o.label).join(", ");
   }
 }
-async function askQuestion(question, state, deps = {}) {
-  const entry = {
-    ...state.parentId ? { parentId: state.parentId } : {},
-    ...state.repo ? { repo: state.repo } : {},
-    ...state.branch ? { branch: state.branch } : {},
-    // Prose in — see `entryFor`'s `turn` case. An agent's question is the case most likely
-    // to run long, and its title was a clipped prefix of itself.
-    ask: question,
-    blocking: true,
-    urgency: "banner"
-  };
+async function ask(state, rail, input) {
+  if (!state.goal) return null;
   try {
-    const sent = await (deps.submit ?? submitNotification)(NotifyRequestSchema2.parse(entry));
-    (state.mine ??= /* @__PURE__ */ new Set()).add(sent.notificationId);
-    return spokenText(await awaitAnswer(state, sent.notificationId));
+    const sent = await rail.contact({
+      goalIds: [state.goal.id],
+      ask: input.ask,
+      waiting: "hard",
+      channel: input.call ? "call" : "notification",
+      ...input.options ? { options: input.options } : {}
+    });
+    const entryId = sent.requestEntryIds[0];
+    if (!entryId) return null;
+    (state.seen ??= /* @__PURE__ */ new Set()).add(entryId);
+    return await new Promise((resolve3) => (state.asks ??= /* @__PURE__ */ new Map()).set(entryId, resolve3));
   } catch {
     return null;
   }
 }
-async function nudgeSetup(label, hint, deps = {}) {
-  const entry = {
-    // Keeps `context`: the title here SUMMARISES rather than repeating — "<label> needs
-    // setup" is not a prefix of the hint — which is exactly the case a hand-written context
-    // is for. `ask` would derive a title from the hint's first sentence and lose the label.
-    context: { title: clip(`${label} needs setup`), description: [hint] },
-    select: "text",
-    urgency: "push"
-  };
-  try {
-    await (deps.submit ?? submitNotification)(NotifyRequestSchema2.parse(entry));
-  } catch {
-  }
-}
-function spokenText(answer) {
-  switch (answer.kind) {
-    case "text":
-      return answer.text.trim() || null;
-    case "option":
-      return answer.label ?? answer.optionId;
-    case "multi":
-    case "ranked":
-      return (answer.labels ?? answer.optionIds).join(", ");
-    case "confirm":
-      return answer.approved ? "yes" : "no";
-    case "clarify":
-      return answer.chunks.join(" ");
-    // A call log: the user's replies are the instruction, the bot's prompts are not.
-    case "turns":
-      return answer.turns.map((t) => t.reply).join(" ").trim() || null;
-    // An auto-answer derived from the user's past decisions — reads like a fast human.
-    case "precedent":
-      return answer.answer;
-    case "ignored":
-      return null;
-  }
-}
-var clip = (s) => (s.length > 120 ? `${s.slice(0, 117)}\u2026` : s) || "(no text)";
-
-// src/run.ts
-init_dist();
-
-// src/harness/session.ts
-import { spawn } from "child_process";
-import { existsSync as existsSync3 } from "fs";
-import { homedir as homedir3 } from "os";
-import { resolve, delimiter as delimiter2 } from "path";
-
-// src/harness/acp.ts
-var none = { events: [], writes: [] };
-function optionFor(options, decision) {
-  const want = decision.allow ? "allow_once" : "reject_once";
-  return options.find((o) => o.kind === want)?.optionId ?? null;
+async function askPermission(event, state, rail) {
+  return decisionFrom(await ask(state, rail, {
+    ask: [`The agent is blocked waiting to run: ${event.summary}`, ...event.reason ? [event.reason] : []].join("\n\n"),
+    options: [{ label: ALLOW }, { label: "Deny" }],
+    call: isDestructive(event.summary)
+  }));
 }
-function createAcpDriver(opts) {
-  return new AcpDriver(opts.cwd, opts.mode, opts.mcp ?? []);
+async function askQuestion(question, state, rail) {
+  return wordsOf(await ask(state, rail, { ask: question }));
 }
-var AcpDriver = class {
-  constructor(cwd, mode, mcp = []) {
-    this.cwd = cwd;
-    this.mode = mode;
-    this.mcp = mcp;
-  }
-  cwd;
-  mode;
-  mcp;
-  nextId = 1;
-  initId;
-  sessionNewId;
-  promptId;
-  sessionId;
-  queued = [];
-  /** Options of each unanswered permission request, keyed by its JSON-RPC id. */
-  pending = /* @__PURE__ */ new Map();
-  /** Where the REPORT starts in `text` — everything before the LAST tool call is working
-   *  narration ("Now the API endpoints." → runs a tool), and it used to ship: the chunks
-   *  concatenate with no separator, so the owner's phone got "…find the repo.Now I have
-   *  the full picture. Writing the migration.Now…" as the opening paragraph of a finished
-   *  task (live, 2026-08-11 — "looks like a working log"). The narration's audience is the
-   *  terminal and host.log; what the agent composed AFTER its last tool call is the part
-   *  addressed to a human, and that is what leaves the machine. */
-  reportFrom = 0;
-  /** The turn being streamed: text accumulates, tools append, both flush on stopReason. */
-  text = "";
-  tools = [];
-  /** The opening frame. Everything after is driven by responses in `handleLine`. */
-  open() {
-    this.initId = this.nextId++;
-    return [
-      frame({
-        id: this.initId,
-        method: "initialize",
-        params: {
-          protocolVersion: 2,
-          // We are not an editor: no file services offered, the agent uses its own.
-          clientCapabilities: { fs: { readTextFile: false, writeTextFile: false } },
-          clientInfo: { name: "paigy-desktop", version: "0.0.0" }
-        }
-      })
-    ];
-  }
-  /** Queue a prompt; it goes out when the session exists and no turn is running. */
-  send(text) {
-    this.queued.push(text);
-    return this.flush();
-  }
-  /** Answer a PermissionEvent (ask mode). The id is the request's JSON-RPC id as a string. */
-  respond(id, decision) {
-    const request = this.pending.get(id);
-    if (!request) return [];
-    this.pending.delete(id);
-    const optionId = optionFor(request.options, decision);
-    return [
-      optionId ? frame({ id: request.id, result: { outcome: { outcome: "selected", optionId } } }) : frame({ id: request.id, result: { outcome: { outcome: "cancelled" } } })
-    ];
-  }
-  /** Cancel anything still blocked — called on stop so the process can exit cleanly. */
-  close() {
-    const writes = [...this.pending.values()].map(
-      (r) => frame({ id: r.id, result: { outcome: { outcome: "cancelled" } } })
-    );
-    this.pending.clear();
-    return writes;
-  }
-  handleLine(line) {
-    const trimmed = line.trim();
-    if (!trimmed) return none;
-    let msg;
-    try {
-      msg = JSON.parse(trimmed);
-    } catch {
-      return none;
-    }
-    if (msg.method !== void 0) {
-      return msg.id !== void 0 ? this.handleRequest(msg) : this.handleNotification(msg);
-    }
-    if (msg.id !== void 0) return this.handleResponse(msg);
-    return none;
-  }
-  // ── responses to our requests ──
-  handleResponse(msg) {
-    if (msg.id === this.initId) {
-      this.initId = void 0;
-      if (msg.error) {
-        return { events: [{ kind: "error", message: `initialize failed: ${msg.error.message}` }], writes: [] };
-      }
-      this.sessionNewId = this.nextId++;
-      return {
-        events: [],
-        writes: [frame({ id: this.sessionNewId, method: "session/new", params: { cwd: this.cwd, mcpServers: this.mcp } })]
-      };
-    }
-    if (msg.id === this.sessionNewId) {
-      this.sessionNewId = void 0;
-      const sessionId2 = msg.result?.sessionId;
-      if (!sessionId2) {
-        return {
-          events: [{ kind: "error", message: `session/new failed: ${msg.error?.message ?? "no sessionId"}` }],
-          writes: []
-        };
-      }
-      this.sessionId = sessionId2;
-      const value = this.mode === "bypass" ? "bypassPermissions" : "default";
-      const writes = [
-        frame({
-          id: this.nextId++,
-          method: "session/set_config_option",
-          params: { sessionId: sessionId2, configId: "mode", value }
-        }),
-        frame({ id: this.nextId++, method: "session/set_mode", params: { sessionId: sessionId2, modeId: value } })
-      ];
-      writes.push(...this.flush());
-      return { events: [], writes };
-    }
-    if (msg.id === this.promptId) {
-      this.promptId = void 0;
-      const events = [];
-      const report = this.text.slice(this.reportFrom).trim() || this.text.trim();
-      if (report || this.tools.length) {
-        events.push({
-          kind: "turn",
-          role: "agent",
-          text: report,
-          ...this.tools.length ? { tools: [...this.tools] } : {}
-        });
-      }
-      const result = report;
-      const failed = msg.error !== void 0 || msg.result?.stopReason === "refusal";
-      this.text = "";
-      this.tools = [];
-      this.reportFrom = 0;
-      const writes = this.flush();
-      if (!writes.length) {
-        events.push({
-          kind: "idle",
-          ...result ? { result } : {},
-          ...failed ? { failed: true } : {}
-        });
-      }
-      return { events, writes };
-    }
-    return none;
-  }
-  // ── the agent talking to us ──
-  handleNotification(msg) {
-    if (msg.method !== "session/update") return none;
-    const update = msg.params?.update;
-    switch (update?.sessionUpdate) {
-      case "agent_message_chunk":
-        this.text += update.content?.text ?? "";
-        return none;
-      case "tool_call": {
-        const title = update.title?.trim() || update.kind || "tool";
-        this.tools.push(title);
-        const note = this.text.slice(this.reportFrom).trim();
-        this.reportFrom = this.text.length;
-        return { events: [{ kind: "work", tool: title, ...note ? { note } : {} }], writes: [] };
-      }
-      default:
-        return none;
-    }
-  }
-  handleRequest(msg) {
-    if (msg.method !== "session/request_permission") {
-      return {
-        events: [],
-        writes: [frame({ id: msg.id, error: { code: -32601, message: `Method not found: ${msg.method}` } })]
-      };
-    }
-    const id = msg.id;
-    const options = msg.params?.options ?? [];
-    const title = msg.params?.toolCall?.title?.trim() || "a tool call";
-    const tool = msg.params?.toolCall?.kind ?? "tool";
-    if (this.mode === "bypass") {
-      const optionId = optionFor(options, { allow: true }) ?? optionFor(options, { allow: false });
-      return {
-        // The decision still goes through Paigy — as history, not a question. Bypass
-        // means "don't stall the agent", never "don't tell the user".
-        events: [{ kind: "turn", role: "agent", text: `auto-approved: ${title}`, tools: [tool] }],
-        writes: [
-          optionId ? frame({ id, result: { outcome: { outcome: "selected", optionId } } }) : frame({ id, result: { outcome: { outcome: "cancelled" } } })
-        ]
-      };
-    }
-    this.pending.set(String(id), { id, options });
-    return {
-      events: [{ kind: "permission", id: String(id), tool, summary: title }],
-      writes: []
-    };
-  }
-  /** Send the queued prompts as one turn, if the agent can take one right now. */
-  flush() {
-    if (!this.sessionId || this.promptId !== void 0 || !this.queued.length) return [];
-    const blocks = this.queued.map((text) => ({ type: "text", text }));
-    this.queued = [];
-    this.promptId = this.nextId++;
-    return [
-      frame({
-        id: this.promptId,
-        method: "session/prompt",
-        params: { sessionId: this.sessionId, prompt: blocks }
-      })
-    ];
+async function finish(result, state, rail) {
+  const goal = state.goal;
+  if (!goal) return;
+  state.goal = void 0;
+  const report = result?.trim() || "Done.";
+  try {
+    await rail.contact({ goalIds: [goal.id], ask: report, waiting: "none", channel: "notification" });
+    const { revision } = await rail.read(goal.id);
+    await rail.update(goal.id, { revision: revision ?? goal.revision, changes: { state: "done", progress: report.slice(0, 1e4) }, reason: "The agent finished its turn without asking anything." });
+  } catch {
   }
-};
-var frame = (body) => JSON.stringify({ jsonrpc: "2.0", ...body });
-
-// src/harness/session.ts
-init_catalog();
-var ADAPTER_BIN = {
-  claude: "claude-agent-acp",
-  codex: "codex-acp",
-  agy: "agy"
-};
-function splitLines(buffer, chunk) {
-  const combined = buffer + chunk;
-  const parts = combined.split("\n");
-  const rest = parts.pop() ?? "";
-  return { lines: parts.filter((l) => l.trim()), rest };
 }
-function startSession(opts) {
-  const cwd = resolve(opts.cwd.replace(/^~(?=$|\/)/, homedir3()));
-  if (!existsSync3(cwd)) {
-    queueMicrotask(() => opts.onEvent({ kind: "error", message: `workspace does not exist: ${cwd}` }));
+async function afterTurn(event, state, rail) {
+  if (!event.failed && !endsWithQuestion(event.result)) {
+    await finish(event.result, state, rail);
+    state.resting = true;
+    return null;
   }
-  const child = (opts.spawnFn ?? spawn)(opts.bin ?? ADAPTER_BIN[opts.harness], [], {
-    cwd,
-    // The adapter shells out to its vendor CLI (`claude`, `codex`), and a GUI- or
-    // launchd-launched process's PATH won't have it — probe dirs plus the RUNNING
-    // node's own bin dir (nvm installs the adapters next to node; launchd's bare
-    // PATH knows neither — live catch 2026-08-04: the first slot-wake ENOENT'd).
-    env: {
-      ...process.env,
-      PATH: [process.env.PATH, ...probeDirs()].filter(Boolean).join(delimiter2),
-      ...opts.token ? { PAIGY_TOKEN: opts.token } : {}
-    },
-    stdio: ["pipe", "pipe", "pipe"]
-  });
-  const write = (frames) => {
-    for (const f of frames) child.stdin?.write(`${f}
-`);
-  };
-  child.stderr?.on("data", (chunk) => {
-    const text = String(chunk).trim();
-    if (text) opts.onEvent({ kind: "error", message: text });
-  });
-  child.on("exit", (code) => {
-    opts.onEvent({ kind: "idle", failed: code !== 0, ...code ? { result: `exited ${code}` } : {} });
-    opts.onExit?.();
-  });
-  child.on("error", (e) => {
-    opts.onEvent({ kind: "error", message: e.message });
-    opts.onExit?.();
-  });
-  const driver = createAcpDriver({ cwd, mode: opts.mode, ...opts.mcp ? { mcp: opts.mcp } : {} });
-  let buffer = "";
-  child.stdout?.on("data", (chunk) => {
-    const { lines, rest } = splitLines(buffer, String(chunk));
-    buffer = rest;
-    for (const line of lines) {
-      const { events, writes } = driver.handleLine(line);
-      write(writes);
-      for (const event of events) opts.onEvent(event);
-    }
-  });
-  write(driver.open());
-  return {
-    send(text) {
-      write(driver.send(text));
-    },
-    respond(id, decision) {
-      write(driver.respond(id, decision));
-    },
-    stop() {
-      write(driver.close());
-      child.kill();
-    }
-  };
-}
+  const reply = await askQuestion(event.failed ? `The agent stopped without finishing.
 
-// src/paigy/activity.ts
-function shortenPaths(s) {
-  return s.replace(/(?<![\w.@+-])(?:\/[\w.@+-]+){3,}/g, (p) => {
-    const parts = p.split("/").filter(Boolean);
-    return `\u2026/${parts.slice(-2).join("/")}`;
-  });
-}
-function workLine(event) {
-  const note = (event.note ?? "").split("\n").find((l) => l.trim()) ?? "";
-  const line = shortenPaths([event.tool.trim(), note.trim()].filter(Boolean).join(" \u2014 ").replace(/\s+/g, " "));
-  return line.length > ACTIVITY_LINE_MAX2 ? `${line.slice(0, ACTIVITY_LINE_MAX2 - 1)}\u2026` : line;
-}
-function pushWork(lines, line) {
-  if (!line || lines[lines.length - 1] === line) return [...lines];
-  return [...lines, line].slice(-ACTIVITY_LINES2);
-}
-function sameTail(a, b) {
-  return a.length === b.length && a.every((l, i) => l === b[i]);
+${event.result?.trim() || "No result reported."}` : event.result ?? "", state, rail);
+  if (!reply) state.resting = true;
+  return reply;
 }
 
 // src/run.ts
 function runHarness(opts) {
   let running = true;
   let tail = [];
-  const state = { ...opts.exclusive ? { exclusive: true } : {} };
+  const state = { resting: true };
   let session = null;
-  const asMe = { token: opts.token };
-  const deps = {
-    submit: (req) => submitNotification(req, asMe),
-    check: () => checkReplies(asMe),
-    ack: (id, st) => setTaskState(id, st, asMe)
-  };
+  const rail = railFor({ token: opts.token });
   async function handle(event) {
     if (event.kind === "error") {
       opts.log(`\u26A0 ${event.message}`);
@@ -36901,8 +36443,7 @@ function runHarness(opts) {
         return;
       }
       opts.log(`\u23F8 blocked: ${event.summary} \u2014 asking your phone`);
-      const { decision, parentId: parentId2 } = await askPermission(event, state, deps);
-      state.parentId ??= parentId2;
+      const decision = await askPermission(event, state, rail);
       session?.respond(event.id, decision);
       opts.log(decision.allow ? `\u2713 approved: ${event.summary}` : `\u2717 denied: ${event.summary}`);
       return;
@@ -36912,41 +36453,39 @@ function runHarness(opts) {
       tail = pushWork(tail, workLine(event));
       return;
     }
-    const { parentId } = await mirror(event, state, deps);
-    state.parentId ??= parentId;
     if (event.kind === "turn") opts.log(`${event.role}: ${event.text.split("\n")[0] ?? ""}`);
     if (event.kind === "idle") {
-      state.resting = true;
       tail = [];
       if (endsWithQuestion(event.result)) {
         const local = await opts.localAsk?.question?.(event.result ?? "") ?? null;
         if (local?.trim() && session && running) {
           opts.log(`you (here): ${local.split("\n")[0] ?? ""}`);
+          state.resting = false;
           session.send(local);
           return;
         }
       }
-      const reply = await nextTurnFrom(event, state, deps);
+      const reply = await afterTurn(event, state, rail);
       if (reply && session && running) {
         opts.log(`you: ${reply.split("\n")[0] ?? ""}`);
         session.send(reply);
       }
     }
   }
-  const paigyMcp = opts.exclusive && opts.token ? [{ name: "paigy", command: "npx", args: ["-y", "@paigy/mcp@latest"], env: { PAIGY_TOKEN: opts.token } }] : void 0;
-  if (paigyMcp) state.sharedWithAgent = true;
   session = startSession({
     harness: opts.harness,
     cwd: opts.cwd,
     mode: opts.mode,
-    ...paigyMcp ? { mcp: paigyMcp } : {},
     ...opts.token ? { token: opts.token } : {},
     ...opts.bin ? { bin: opts.bin } : {},
     ...opts.onExit ? { onExit: opts.onExit } : {},
     onEvent: (event) => void handle(event).catch((err) => opts.log(`\u26A0 ${err.message}`))
   });
-  if (opts.prompt) session.send(opts.prompt);
-  void pump(session, state, { ...deps, onIdle: () => running }).catch(
+  if (opts.prompt) {
+    state.resting = false;
+    session.send(opts.prompt);
+  }
+  void pump(session, state, rail, { onIdle: () => running }).catch(
     (e) => opts.log(`\u26A0 conversation loop stopped: ${e.message}`)
   );
   opts.log(`\u25B6 started ${opts.harness} in ${opts.cwd} (${opts.mode} mode)`);
@@ -36976,7 +36515,7 @@ import { join as join4 } from "path";
 
 // src/workspaces.ts
 import { existsSync as existsSync4, mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "fs";
-import { dirname as dirname3, join as join3, resolve as resolve2 } from "path";
+import { dirname as dirname2, join as join3, resolve as resolve2 } from "path";
 import { homedir as homedir4 } from "os";
 function workspacesFile() {
   return join3(homedir4(), ".paigy", "workspaces.json");
@@ -36994,7 +36533,7 @@ function addWorkspace(dir, deps) {
   const all = listWorkspaces(deps);
   if (!all.includes(next)) {
     all.push(next);
-    mkdirSync2(dirname3(deps.file), { recursive: true });
+    mkdirSync2(dirname2(deps.file), { recursive: true });
     writeFileSync2(deps.file, JSON.stringify(all, null, 2));
   }
   return all;
@@ -37013,21 +36552,17 @@ function resolveWakeDir(pinned, deps) {
 
 // src/host.ts
 var HOST_FILE = join4(homedir5(), ".paigy", "host.json");
-var IDLE_WAKE_MS = 10 * 6e4;
 var runKey = (slot) => `slot:${slot}`;
 var claimedRun = (sessionId2) => {
   const slot = sessionSlot(sessionId2);
   return { slot, key: runKey(slot) };
 };
 async function slotHasWaitingWork(token) {
-  return (await pendingSummary({ token })).unacknowledged > 0;
+  return (await checkReplies({ token })).deliveries.length > 0;
 }
 var PRESENCE_FRESH_MS = 3 * 6e4;
-function wakeAction(live, seenAt, now, serverSeenAt) {
-  if (live) {
-    if (seenAt === void 0) return "skip";
-    return now - seenAt >= IDLE_WAKE_MS ? "prompt" : "skip";
-  }
+function wakeAction(live, now, serverSeenAt) {
+  if (live) return "skip";
   if (serverSeenAt !== void 0 && now - serverSeenAt < PRESENCE_FRESH_MS) return "skip";
   return "spawn";
 }
@@ -37055,6 +36590,8 @@ function startHost(opts) {
       workspaces: listWorkspaces(opts.wsDeps)
     }, asHost).catch(() => {
     });
+    void listenSlots().then(sweepSlots).catch(() => {
+    });
   };
   async function claimAndSpawn() {
     const specs = await claimSessions(asHost).catch(() => []);
@@ -37066,8 +36603,7 @@ function startHost(opts) {
         harness: spec.harness,
         cwd: spec.workspace,
         mode: "bypass",
-        prompt: spec.prompt ?? "",
-        exclusive: true,
+        prompt: "",
         token: spec.token,
         onExit: () => {
           runs.delete(key);
@@ -37087,45 +36623,39 @@ function startHost(opts) {
     }
   }
   const SLOT_HARNESS = { "mcp-agent": "claude", codex: "codex", antigravity: "agy" };
-  const wakePrompt = (fresh) => "You were woken because Paigy work is waiting for you. " + (fresh ? "This is a fresh session with your existing identity, so you may already have work in flight that you can't remember. " : "You have been running, so some of this may already be yours \u2014 but not what arrived while you were idle. ") + "Call check_replies FIRST, then get_thread on each conversation it returns and read it before you touch anything: it holds what you were doing, where (a repo or worktree may not be this folder), and what the owner already decided. Then handle what's waiting and follow your paigy instructions to stay in the loop. Speak to the owner at exactly TWO moments: when you are BLOCKED on a decision only they can make (contact with waiting:'hard', the decision as the ask, options if you have real ones), and when you are DONE (one short report: what shipped, how you verified it, anything you flagged). Progress is never a contact \u2014 call set_task_state('in_progress') when you pick work up and the app shows you working; narrate to the terminal, not to the human.";
-  async function sweepSlots() {
+  async function presenceMap() {
     const presence = /* @__PURE__ */ new Map();
     try {
       for (const c of (await listConnections(asHost)).items) {
         if (c.lastSeenAt) presence.set(c.id, Date.parse(c.lastSeenAt));
       }
+      lastPresence = presence;
     } catch {
     }
-    for (const slot of listSlots()) {
+    return presence;
+  }
+  let lastPresence = /* @__PURE__ */ new Map();
+  async function wakeSlot(slot, presence) {
+    {
       const harness = SLOT_HARNESS[slot] ?? (slot === "Desktop" ? void 0 : "claude");
       const key = runKey(slot);
-      if (!harness) continue;
+      if (!harness) return;
       const live = runs.get(key);
       const tokenId = slotIdentity(slot).tokenId;
       const seenByServer = tokenId ? presence.get(tokenId) : void 0;
-      const action = wakeAction(!!live, published.get(key)?.movedAt, Date.now(), seenByServer);
-      if (action === "skip") continue;
+      if (wakeAction(!!live, Date.now(), seenByServer) === "skip") return;
       const token = readToken(slot);
-      if (!token) continue;
+      if (!token) return;
       const workspace = resolveWakeDir(slotIdentity(slot).workspace, opts.wsDeps);
-      if (!workspace) continue;
-      if (!await slotHasWaitingWork(token).catch(() => false)) continue;
+      if (!workspace) return;
+      if (!await slotHasWaitingWork(token).catch(() => false)) return;
       const label = slotName(slot) ?? slot;
-      if (live) {
-        const seen = published.get(key);
-        const quiet = seen ? Math.round((Date.now() - seen.movedAt) / 6e4) : 0;
-        live.run.send(wakePrompt(false));
-        if (seen) seen.movedAt = Date.now();
-        opts.log(`\u25B6 re-woke ${label} \u2014 quiet ${quiet}m with work waiting`);
-        continue;
-      }
       const log = (line) => opts.log(`[${label}] ${line}`);
       const run = runHarness({
         harness,
         cwd: workspace,
         mode: "bypass",
-        prompt: wakePrompt(true),
-        exclusive: true,
+        prompt: "",
         token,
         // A dead run must not squat the slot — evict so the next wake can respawn.
         onExit: () => {
@@ -37140,20 +36670,54 @@ function startHost(opts) {
       opts.log(`\u25B6 woke ${label} (${harness}) \u2014 work was waiting in ${workspace}`);
     }
   }
+  const listening = /* @__PURE__ */ new Map();
+  const joining = /* @__PURE__ */ new Set();
+  async function listenSlots() {
+    const want = new Set(listSlots().filter((slot) => slot !== "Desktop" && !!readToken(slot)));
+    for (const [slot, sub] of [...listening]) {
+      if (want.has(slot)) continue;
+      listening.delete(slot);
+      void sub.close().catch(() => {
+      });
+    }
+    for (const slot of want) {
+      if (listening.has(slot) || joining.has(slot)) continue;
+      const token = readToken(slot);
+      if (!token) continue;
+      joining.add(slot);
+      try {
+        const sub = await subscribeWake(
+          () => void presenceMap().then((presence) => wakeSlot(slot, presence)).catch(() => {
+          }),
+          { token }
+        );
+        listening.set(slot, sub);
+        opts.log(`\u25C9 listening for ${slotName(slot) ?? slot}`);
+      } catch (e) {
+        opts.log(`\u25CC not listening for ${slotName(slot) ?? slot} \u2014 ${e.message}`);
+      } finally {
+        joining.delete(slot);
+      }
+    }
+  }
+  async function sweepSlots() {
+    const presence = await presenceMap();
+    for (const slot of listSlots()) await wakeSlot(slot, presence);
+  }
   const ACTIVITY_MS = 2e3;
   const published = /* @__PURE__ */ new Map();
   const streamActivity = () => {
-    const publishTail = (token, lines) => {
-      void heartbeat(void 0, { token, activity: { lines, at: (/* @__PURE__ */ new Date()).toISOString() } }).catch(() => {
+    const publishTail = (token, lines2) => {
+      void heartbeat(void 0, { token, activity: { lines: lines2, at: (/* @__PURE__ */ new Date()).toISOString() } }).catch(() => {
       });
     };
     for (const [key, r] of runs) {
       if (!r.token) continue;
-      const lines = r.run.tail();
+      const lines2 = r.run.tail();
       const was = published.get(key);
-      if (was && sameTail(was.lines, lines)) continue;
-      published.set(key, { token: r.token, lines, movedAt: Date.now() });
-      publishTail(r.token, lines);
+      if (was && sameTail(was.lines, lines2)) continue;
+      published.set(key, { token: r.token, lines: lines2 });
+      publishTail(r.token, lines2);
     }
     for (const [key, was] of published) {
       if (runs.has(key)) continue;
@@ -37171,7 +36735,6 @@ function startHost(opts) {
   const pulse = setInterval(beat, 6e4);
   const spawnPoll = setInterval(() => {
     void claimAndSpawn();
-    void sweepSlots();
     publish();
   }, 5e3);
   const activityTick = setInterval(streamActivity, ACTIVITY_MS);
@@ -37182,6 +36745,12 @@ function startHost(opts) {
     }
     runs.clear();
   };
+  const stopListening = async () => {
+    const subs = [...listening.values()];
+    listening.clear();
+    await Promise.all(subs.map((sub) => sub.close().catch(() => {
+    })));
+  };
   const api = {
     sessions: () => [...runs.entries()].map(([id, r]) => [id, r.label]),
     // Every identity this machine holds, plus what it's doing right now. Slots are the
@@ -37202,7 +36771,16 @@ function startHost(opts) {
           slot,
           tokenId: id.tokenId,
           voice: id.voice,
-          running: live.has(name),
+          // RUNNING IS ABOUT THE IDENTITY, NOT ABOUT US (owner, 2026-09-14). This was
+          // `live.has(name)` — "this host spawned it and it has not exited" — which is a fact
+          // about our own process table, not about the agent. An ordinary terminal session
+          // heartbeating every 60 s read as NOT running, and after a host restart so did the
+          // sessions we started ourselves. The server already knows: `last_seen_at` on the
+          // agent's own token, the same evidence `wakeAction` stands back for. So: a run we
+          // hold, OR a process the server heard from inside `PRESENCE_FRESH_MS`.
+          running: live.has(name) || !!id.tokenId && Date.now() - (lastPresence.get(id.tokenId) ?? 0) < PRESENCE_FRESH_MS,
+          // `working` stays ours alone — it means a run WE hold is mid-turn, which is the only
+          // thing a tail can tell us. A process we did not spawn has no tail here to read.
           working: live.get(name)?.working() ?? false
         };
       });
@@ -37212,6 +36790,7 @@ function startHost(opts) {
       clearInterval(pulse);
       clearInterval(spawnPoll);
       stopSessions();
+      void stopListening();
       streamActivity();
       clearInterval(activityTick);
       try {
@@ -37221,6 +36800,8 @@ function startHost(opts) {
     }
   };
   publish();
+  void listenSlots().then(sweepSlots).catch(() => {
+  });
   return api;
 }
 
@@ -37243,7 +36824,7 @@ function bridgesToInstall(adapters) {
 function startBridgeInstalls(bridges, deps = {}) {
   const spawn2 = deps.spawn ?? shSpawner;
   const boundMs = deps.boundMs ?? BRIDGE_BOUND_MS;
-  const sleep2 = deps.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+  const sleep3 = deps.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
   const running = bridges.map((b) => {
     let proc = null;
     let outcome;
@@ -37262,7 +36843,7 @@ function startBridgeInstalls(bridges, deps = {}) {
     started: running.length,
     wait: async () => {
       let timedOut = false;
-      const bound = sleep2(boundMs).then(() => {
+      const bound = sleep3(boundMs).then(() => {
         timedOut = true;
       });
       await Promise.race([Promise.all(running.map((r) => r.outcome)), bound]);
@@ -37601,7 +37182,6 @@ async function main() {
   if (state && state.status !== "ready") {
     const hint = state.hint ?? "setup incomplete";
     console.error(`\u270B ${state.label}: ${hint}`);
-    await nudgeSetup(state.label, hint);
     process.exit(1);
   }
   const askTerminal = async (promptText) => {
@@ -37626,9 +37206,7 @@ async function main() {
     mode: parsed.mode,
     prompt: parsed.prompt,
     ...state?.bin ? { bin: state.bin } : {},
-    // A hatched identity's token is its own — exclusive draining, same as
-    // phone-launched sessions (the opening-move rule).
-    ...identityToken ? { exclusive: true, token: identityToken } : {},
+    ...identityToken ? { token: identityToken } : {},
     localAsk: {
       permission: async (summary) => {
         const said = await askTerminal(`\u23F8 blocked: ${summary} \u2014 allow? [y/n]`);